← Back to the live CVE advisory feed

CVE-2026-89032: Product identification pending

Severity

8.7 (HIGH)

Vendor

BERRIAI LITELLM BEFORE

Affected versions

Before 1.101.0-rc.1

Fixed version

1.101.0-rc.1

Patch status

Patched

Published

2026-09-25T17:17:18.793

Modified

2026-09-25T17:17:18.793

Why it matters

This matters because the affected product may allow code execution. Prioritize systems that are internet-facing or have privileged access to other infrastructure.

Recommended admin actions

• Review and patch based on exposure, asset criticality, and business impact.
• Compare installed versions against the affected version range in the advisory.
• Review logs for suspicious activity related to the affected application or component.

Technical summary

BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows authenticated users to read other tenants' cached responses by exploiting a metadata key mismatch between _get_semantic_cache_tenant_scope() and _get_metadata_variable_name(). Attackers holding a valid virtual key can submit semantically similar prompts on affected routes such as /v1/responses and /bedrock/* to retrieve cached responses containing other tenants' personally identifiable information, financial data, or source code, and can cause agentic front-ends to auto-execute attacker-supplied tool calls under victim credentials by returning cached function_call or tool_calls payloads to a different principal.

View the official NVD record for CVE-2026-89032

CVE data is sourced from NVD/CNA records and optional enrichment. Validate against the vendor advisory before taking production action.