#LiteLLM command injection vulnerability CVE-2026-42271 that could allow any authenticated user to run arbitrary commands on the host, has been added to the CISA KEV catalog:
👇
https://thehackernews.com/2026/06/litellm-flaw-cve-2026-42271-exploited.html
Sam Stepanyan :verified: 🐘
npub1gr…9gp67
2026-06-09 11:11:23 UTC
Author Public Key
npub1gr8f0c2al23r8wpv2v7vt2na36g3xnpz06pceqhrysmlg8gahyjqp9gp67Seen on
wss://relay.momostr.pinkPublished at
2026-06-09 11:11:23 UTCEvent JSON
{
"id": "b3dbe2c5ea71b4f0eef549a995fa9f958b44568d1f70f5cee995522d31fb3ec8",
"pubkey": "40ce97e15dfaa233b82c533cc5aa7d8e91134c227e838c82e32437f41d1db924",
"created_at": 1781003483,
"kind": 1,
"tags": [
[
"t",
"litellm"
],
[
"proxy",
"https://infosec.exchange/@securestep9/116719844326065265",
"web"
],
[
"proxy",
"https://infosec.exchange/users/securestep9/statuses/116719844326065265",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/securestep9/statuses/116719844326065265",
"pink.momostr"
],
[
"-"
]
],
"content": "#LiteLLM command injection vulnerability CVE-2026-42271 that could allow any authenticated user to run arbitrary commands on the host, has been added to the CISA KEV catalog:\n👇\nhttps://thehackernews.com/2026/06/litellm-flaw-cve-2026-42271-exploited.html",
"sig": "9c61a4feabe4a446329321536df04e5c0606440640cb302e8d976859a2f16e0fb605adc7c6301fe58cf1b0c2117c76236b7a9d9254a76ed942bc6101ddf39654"
}