Vulnpedia
← All CVEs

CVE-2026-35029

HIGH 8.7 PoC CATALOGUED DETECTION TEMPLATE ALL-YEARS

Published 2026-04-06 · Last modified 2026-07-15 · GitHub_M · NVD: Modified

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not enforce admin role authorization. A user who is already authenticated into the platform can then use this endpoint to modify proxy configuration and environment variables, register custom pass-through endpoint handlers pointing to attacker-controlled Python code, achieving remote code execution, read arbitrary server files by setting UI_LOGO_PATH and fetching via /get_image, and take over other privileged accounts by overwriting UI_USERNAME and UI_PASSWORD environment variables. Fixed in v1.83.0.

REPORTED EXPLOITATION

VulnCheck KEV reports exploitation for this CVE. These are source-specific reports; review the details and vendor guidance below.

Exploitation likelihood

38.6%chance of exploitation in 30 days · 99th percentile

○ In CISA KEV● Catalogued PoC◆ SSVC: exploitation none, automatable no

Impact if exploited

8.7CVSS 4.0 · HIGH · CNA

  • ConfidentialityHigh
  • IntegrityHigh
  • AvailabilityHigh

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ⚠Privileges: Requires a low-privilege account
  • ✓User interaction: No user interaction needed
  • ✓Complexity: No special conditions — reliably repeatable
  • ✓Requirements: No special attack requirements

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

Public PoC or exploit resources are catalogued below.

Listed by the named source; Vulnpedia has not tested these resources.

PoC data: JSON

Detection templates

Detection checks are listed separately from PoCs.

Resource commands

nuclei -id CVE-2026-35029 -u https://TARGETDetection template — review its checks and affected versions before use.
curl -s https://vulnpedia.com/cve/CVE-2026-35029/poc.jsonMachine-readable PoC index for this CVE (for automation).

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot:

Affected

Vendors Berriai Red Hat Litellm

Products Litellm Red Hat Ansible Automation Platform 2.6 Red Hat Openshift Ai 2.25 Red Hat Openshift Ai 3.3 Lightspeed Core Red Hat Openshift Ai (Rhoai)

Weakness (CWE)

  • CWE-863: : Incorrect Authorization
  • CWE-425: Direct Request ('Forced Browsing')

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N

References and research data (JSON)

Packages and version ranges

Each advisory describes its own package and affected ranges. A boundary applies to that range; it is not a universal upgrade recommendation.

  • litellm PyPI

    pkg:pypi/litellm

    ECOSYSTEM range
    • All earlier versions (introduced 0)
    • Fixed boundary (excluded): 1.83.0
    727 explicitly listed affected versions

    0.1.0, 0.1.1, 0.1.2, 0.1.201, 0.1.202, 0.1.203, 0.1.204, 0.1.205, 0.1.206, 0.1.207, 0.1.208, 0.1.209, 0.1.210, 0.1.211, 0.1.212, 0.1.213, 0.1.214, 0.1.215, 0.1.216, 0.1.217, 0.1.218, 0.1.219, 0.1.220, 0.1.221, 0.1.222, 0.1.223, 0.1.224, 0.1.225, 0.1.226, 0.1.227, 0.1.228, 0.1.229, 0.1.2291, 0.1.230, 0.1.231, 0.1.232, 0.1.233, 0.1.234, 0.1.235, 0.1.236, 0.1.237, 0.1.238, 0.1.3, 0.1.31, 0.1.32, 0.1.330, 0.1.331, 0.1.34, 0.1.341, 0.1.343, 0.1.345, 0.1.347, 0.1.348, 0.1.349, 0.1.351, 0.1.352, 0.1.353, 0.1.354, 0.1.356, 0.1.360, 0.1.361, 0.1.362, 0.1.363, 0.1.364, 0.1.365, 0.1.366, 0.1.367, 0.1.368, 0.1.369, 0.1.370, 0.1.371, 0.1.372, 0.1.373, 0.1.375, 0.1.376, 0.1.379, 0.1.380, 0.1.381, 0.1.383, 0.1.384, 0.1.385, 0.1.386, 0.1.387, 0.1.388, 0.1.389, 0.1.392, 0.1.393, 0.1.394, 0.1.398, 0.1.399, 0.1.400, 0.1.401, 0.1.402, 0.1.403, 0.1.404, 0.1.405, 0.1.410, 0.1.411, 0.1.412, 0.1.415, 0.1.419, 0.1.420, 0.1.421, 0.1.422, 0.1.424, 0.1.425, 0.1.426, 0.1.429, 0.1.433, 0.1.434, 0.1.435, 0.1.436, 0.1.437, 0.1.438, 0.1.439, 0.1.440, 0.1.441, 0.1.442, 0.1.443, 0.1.444, 0.1.445, 0.1.446, 0.1.447, 0.1.448, 0.1.449, 0.1.450, 0.1.451, 0.1.452, 0.1.456, 0.1.457, 0.1.459, 0.1.460, 0.1.461, 0.1.464, 0.1.465, 0.1.475, 0.1.477, 0.1.479, 0.1.480, 0.1.481, 0.1.482, 0.1.486, 0.1.487, 0.1.488, 0.1.490, 0.1.491, 0.1.492, 0.1.493, 0.1.494, 0.1.495, 0.1.497, 0.1.500, 0.1.501, 0.1.504, 0.1.507, 0.1.508, 0.1.509, 0.1.510, 0.1.511, 0.1.512, 0.1.516, 0.1.517, 0.1.518, 0.1.520, 0.1.525, 0.1.530, 0.1.531, 0.1.533, 0.1.535, 0.1.536, 0.1.537, 0.1.538, 0.1.544, 0.1.546, 0.1.547, 0.1.548, 0.1.549, 0.1.550, 0.1.551, 0.1.552, 0.1.553, 0.1.554, 0.1.555, 0.1.556, 0.1.557, 0.1.558, 0.1.559, 0.1.560, 0.1.561, 0.1.562, 0.1.563, 0.1.567, 0.1.568, 0.1.569, 0.1.570, 0.1.574, 0.1.578, 0.1.580, 0.1.582, 0.1.583, 0.1.585, 0.1.586, 0.1.587, 0.1.590, 0.1.591, 0.1.593, 0.1.595, 0.1.596, 0.1.597, 0.1.598, 0.1.600, 0.1.601, 0.1.604, 0.1.605, 0.1.607, 0.1.609, 0.1.610, 0.1.615, 0.1.618, 0.1.619, 0.1.620, 0.1.621, 0.1.623, 0.1.624, 0.1.625, 0.1.626, 0.1.629, 0.1.630, 0.1.631, 0.1.632, 0.1.634, 0.1.635, 0.1.636, 0.1.638, 0.1.639, 0.1.641, 0.1.642, 0.1.643, 0.1.644, 0.1.645, 0.1.646, 0.1.647, 0.1.648, 0.1.649, 0.1.650, 0.1.651, 0.1.652, 0.1.674, 0.1.680, 0.1.681, 0.1.683, 0.1.685, 0.1.686, 0.1.687, 0.1.689, 0.1.690, 0.1.692, 0.1.693, 0.1.696, 0.1.697, 0.1.698, 0.1.700, 0.1.700.dev0, 0.1.700.dev1, 0.1.700.dev2, 0.1.700.dev3, 0.1.700.dev4, 0.1.700.dev5, 0.1.702, 0.1.704, 0.1.706, 0.1.714, 0.1.714.dev1, 0.1.715, 0.1.716, 0.1.719, 0.1.720, 0.1.721, 0.1.723, 0.1.724, 0.1.729, 0.1.736, 0.1.738, 0.1.743, 0.1.745, 0.1.746, 0.1.747, 0.1.748, 0.1.749, 0.1.750, 0.1.751, 0.1.758, 0.1.765, 0.1.769, 0.1.7701, 0.1.7713, 0.1.772, 0.1.774, 0.1.780, 0.1.781, 0.1.784, 0.1.786, 0.1.788, 0.1.789, 0.1.793, 0.1.794, 0.1.805, 0.1.806, 0.1.807, 0.1.813, 0.1.814, 0.1.815, 0.1.816, 0.1.817, 0.1.818, 0.1.819, 0.1.820, 0.1.821, 0.1.824, 0.10.0, 0.10.1, 0.11.1, 0.12.10, 0.12.11, 0.12.12, 0.12.4, 0.12.4.dev1, 0.12.4.dev2, 0.12.5, 0.12.5.dev1, 0.12.7, 0.12.7.dev1, 0.12.8, 0.12.9, 0.13.0, 0.13.1, 0.13.1.dev1, 0.13.1.dev2, 0.13.1.dev3, 0.13.2, 0.13.2.dev1, 0.13.3.dev1, 0.13.3.dev2, 0.13.6.dev1, 0.13.6.dev2, 0.13.6.dev3, 0.13.7.dev1, 0.14.0, 0.14.0.dev1, 0.14.1, 0.2.5, 0.2.6, 0.3.0, 0.3.1, 0.4.0, 0.4.4, 0.5.2, 0.5.3, 0.5.4, 0.5.6, 0.6.0, 0.6.1, 0.6.2, 0.6.6, 0.7.1, 0.7.1.dev1, 0.7.1.dev2, 0.7.1.dev3, 0.7.10, 0.7.3, 0.7.4, 0.7.5, 0.7.9, 0.8.0, 0.8.1, 0.8.2, 0.8.3, 0.8.4, 0.8.5, 0.8.6, 0.9.0, 0.9.1, 0.9.2, 0.9.2.dev1, 1.0.0, 1.0.0.dev1, 1.0.3, 1.0.3.dev1, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.10.0, 1.10.1, 1.10.10, 1.10.11, 1.10.2, 1.10.3, 1.10.4, 1.10.6, 1.10.8, 1.10.9, 1.10.dev11, 1.11.0, 1.11.1, 1.12.0, 1.12.1, 1.12.2, 1.12.3, 1.12.5, 1.12.5.dev1, 1.12.6.dev1, 1.12.6.dev2, 1.12.6.dev3, 1.12.6.dev4, 1.12.6.dev5, 1.13.2, 1.14.0, 1.14.0.dev1, 1.14.1, 1.14.2, 1.14.3, 1.14.4, 1.2.0, 1.3.1, 1.3.3, 1.3.3.dev1, 1.3.3.dev2, 1.3.3.dev3, 1.4.0, 1.53.1, 1.53.1.dev1, 1.53.2, 1.53.3, 1.53.4, 1.53.5, 1.53.6, 1.53.7, 1.53.8, 1.53.9, 1.54.0, 1.54.1, 1.55.0, 1.55.1, 1.55.10, 1.55.11, 1.55.12, 1.55.2, 1.55.3, 1.55.4, 1.55.6, 1.55.7, 1.55.8, 1.55.9, 1.56.10, 1.56.2, 1.56.3, 1.56.4, 1.56.5, 1.56.6, 1.56.8, 1.56.8.dev4, 1.56.8.dev5, 1.56.8.dev6, 1.56.8.dev7, 1.56.9, 1.57.0, 1.57.1, 1.57.10, 1.57.11, 1.57.2, 1.57.3, 1.57.4, 1.57.5, 1.57.7, 1.57.7.dev1, 1.57.8, 1.58.0, 1.58.1, 1.58.2, 1.58.4, 1.59.0, 1.59.1, 1.59.1.dev1, 1.59.10, 1.59.10.dev1, 1.59.12, 1.59.2, 1.59.3, 1.59.5, 1.59.6, 1.59.7, 1.59.8, 1.59.9, 1.6.0, 1.60.0, 1.60.2, 1.60.4, 1.60.5, 1.60.6, 1.60.7, 1.60.8, 1.60.9, 1.61.0, 1.61.0.dev1, 1.61.1, 1.61.11, 1.61.13, 1.61.15, 1.61.16, 1.61.17, 1.61.19, 1.61.2, 1.61.20, 1.61.3, 1.61.4, 1.61.5, 1.61.6, 1.61.7, 1.61.8, 1.61.9, 1.62.1, 1.62.4, 1.63.0, 1.63.0.dev12, 1.63.11, 1.63.11.dev1, 1.63.12, 1.63.14, 1.63.2, 1.63.3, 1.63.4.dev1, 1.63.5, 1.63.6, 1.63.7, 1.63.8, 1.64.1, 1.65.0, 1.65.0.post1, 1.65.1, 1.65.3, 1.65.4, 1.65.4.post1, 1.65.5, 1.65.6, 1.65.7, 1.65.8, 1.66.0, 1.66.1, 1.66.2, 1.66.3, 1.67.0, 1.67.0.post1, 1.67.1, 1.67.2, 1.67.4, 1.67.4.dev1, 1.67.4.post1, 1.67.5, 1.67.6, 1.68.0, 1.68.1, 1.68.1.dev1, 1.68.2, 1.69.0, 1.69.1, 1.69.2, 1.69.3, 1.7.1, 1.7.11, 1.7.12, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 1.7.7, 1.7.8, 1.7.9, 1.70.0, 1.70.2, 1.70.4, 1.71.0, 1.71.1, 1.71.2, 1.71.3, 1.72.0, 1.72.1, 1.72.2, 1.72.2.post1, 1.72.3, 1.72.4, 1.72.5.dev1, 1.72.5.dev2, 1.72.5.dev3, 1.72.6, 1.72.6.post1, 1.72.6.post2, 1.72.7, 1.72.7.dev1, 1.72.7.dev7, 1.72.9, 1.73.0, 1.73.0.post1, 1.73.0rc1, 1.73.1, 1.73.2, 1.73.6, 1.73.6.post1, 1.73.6rc2, 1.73.7, 1.73.7.dev1, 1.73.7.dev2, 1.73.7.dev3, 1.73.7.dev4, 1.74.0, 1.74.0.post1, 1.74.0.post2, 1.74.1, 1.74.12, 1.74.14, 1.74.15, 1.74.15.post1, 1.74.15.post2, 1.74.2, 1.74.3, 1.74.3.post1, 1.74.3rc1, 1.74.3rc2, 1.74.3rc3, 1.74.4, 1.74.4.dev1, 1.74.6, 1.74.7, 1.74.7.post1, 1.74.7.post2, 1.74.7rc1, 1.74.8, 1.74.8.dev2, 1.74.9, 1.74.9.dev1, 1.74.9.dev2, 1.74.9.post1, 1.74.9.post2, 1.75.0, 1.75.2, 1.75.3, 1.75.4, 1.75.5.post1, 1.75.5.post2, 1.75.6, 1.75.7, 1.75.8, 1.75.9, 1.76.0, 1.76.1, 1.76.2, 1.76.3, 1.77.0, 1.77.1, 1.77.2.post1, 1.77.3, 1.77.4, 1.77.4.dev1, 1.77.5, 1.77.7, 1.78.0, 1.78.0rc2, 1.78.2, 1.78.3, 1.78.4, 1.78.5, 1.78.6, 1.78.7, 1.79.0, 1.79.0.dev1, 1.79.0.dev2, 1.79.0.dev3, 1.79.1, 1.79.2, 1.79.3, 1.79.3.dev8, 1.8.1, 1.80.0, 1.80.10, 1.80.11, 1.80.12, 1.80.13, 1.80.15, 1.80.16, 1.80.17, 1.80.5, 1.80.6, 1.80.7, 1.80.8, 1.80.9, 1.81.0, 1.81.1, 1.81.10, 1.81.11, 1.81.12, 1.81.13, 1.81.14, 1.81.15, 1.81.16, 1.81.3, 1.81.4, 1.81.5, 1.81.6, 1.81.7, 1.81.8, 1.81.9, 1.81.9.dev1, 1.82.0, 1.82.1, 1.82.2, 1.82.3, 1.82.4, 1.82.5, 1.82.6, 1.9.0, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.dev0

    Additional upstream package constraints
    {
  "database": {
    "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-53mr-6c8q-9789/GHSA-53mr-6c8q-9789.json"
  }
}
    GitHub Advisory Database · GHSA-53mr-6c8q-9789 · Updated 2026-09-10T03:50:43.006877910Z
  • litellm PyPI

    pkg:pypi/litellm

    ECOSYSTEM range
    • All earlier versions (introduced 0)
    • Fixed boundary (excluded): 1.83.0
    1101 explicitly listed affected versions

    0.1.0, 0.1.1, 0.1.2, 0.1.201, 0.1.202, 0.1.203, 0.1.204, 0.1.205, 0.1.206, 0.1.207, 0.1.208, 0.1.209, 0.1.210, 0.1.211, 0.1.212, 0.1.213, 0.1.214, 0.1.215, 0.1.216, 0.1.217, 0.1.218, 0.1.219, 0.1.220, 0.1.221, 0.1.222, 0.1.223, 0.1.224, 0.1.225, 0.1.226, 0.1.227, 0.1.228, 0.1.229, 0.1.2291, 0.1.230, 0.1.231, 0.1.232, 0.1.233, 0.1.234, 0.1.235, 0.1.236, 0.1.237, 0.1.238, 0.1.3, 0.1.31, 0.1.32, 0.1.330, 0.1.331, 0.1.34, 0.1.341, 0.1.343, 0.1.345, 0.1.347, 0.1.348, 0.1.349, 0.1.351, 0.1.352, 0.1.353, 0.1.354, 0.1.356, 0.1.360, 0.1.361, 0.1.362, 0.1.363, 0.1.364, 0.1.365, 0.1.366, 0.1.367, 0.1.368, 0.1.369, 0.1.370, 0.1.371, 0.1.372, 0.1.373, 0.1.375, 0.1.376, 0.1.379, 0.1.380, 0.1.381, 0.1.383, 0.1.384, 0.1.385, 0.1.386, 0.1.387, 0.1.388, 0.1.389, 0.1.392, 0.1.393, 0.1.394, 0.1.398, 0.1.399, 0.1.400, 0.1.401, 0.1.402, 0.1.403, 0.1.404, 0.1.405, 0.1.410, 0.1.411, 0.1.412, 0.1.415, 0.1.419, 0.1.420, 0.1.421, 0.1.422, 0.1.424, 0.1.425, 0.1.426, 0.1.429, 0.1.433, 0.1.434, 0.1.435, 0.1.436, 0.1.437, 0.1.438, 0.1.439, 0.1.440, 0.1.441, 0.1.442, 0.1.443, 0.1.444, 0.1.445, 0.1.446, 0.1.447, 0.1.448, 0.1.449, 0.1.450, 0.1.451, 0.1.452, 0.1.456, 0.1.457, 0.1.459, 0.1.460, 0.1.461, 0.1.464, 0.1.465, 0.1.475, 0.1.477, 0.1.479, 0.1.480, 0.1.481, 0.1.482, 0.1.486, 0.1.487, 0.1.488, 0.1.490, 0.1.491, 0.1.492, 0.1.493, 0.1.494, 0.1.495, 0.1.497, 0.1.500, 0.1.501, 0.1.504, 0.1.507, 0.1.508, 0.1.509, 0.1.510, 0.1.511, 0.1.512, 0.1.516, 0.1.517, 0.1.518, 0.1.520, 0.1.525, 0.1.530, 0.1.531, 0.1.533, 0.1.535, 0.1.536, 0.1.537, 0.1.538, 0.1.544, 0.1.546, 0.1.547, 0.1.548, 0.1.549, 0.1.550, 0.1.551, 0.1.552, 0.1.553, 0.1.554, 0.1.555, 0.1.556, 0.1.557, 0.1.558, 0.1.559, 0.1.560, 0.1.561, 0.1.562, 0.1.563, 0.1.567, 0.1.568, 0.1.569, 0.1.570, 0.1.574, 0.1.578, 0.1.580, 0.1.582, 0.1.583, 0.1.585, 0.1.586, 0.1.587, 0.1.590, 0.1.591, 0.1.593, 0.1.595, 0.1.596, 0.1.597, 0.1.598, 0.1.600, 0.1.601, 0.1.604, 0.1.605, 0.1.607, 0.1.609, 0.1.610, 0.1.615, 0.1.618, 0.1.619, 0.1.620, 0.1.621, 0.1.623, 0.1.624, 0.1.625, 0.1.626, 0.1.629, 0.1.630, 0.1.631, 0.1.632, 0.1.634, 0.1.635, 0.1.636, 0.1.638, 0.1.639, 0.1.641, 0.1.642, 0.1.643, 0.1.644, 0.1.645, 0.1.646, 0.1.647, 0.1.648, 0.1.649, 0.1.650, 0.1.651, 0.1.652, 0.1.674, 0.1.680, 0.1.681, 0.1.683, 0.1.685, 0.1.686, 0.1.687, 0.1.689, 0.1.690, 0.1.692, 0.1.693, 0.1.696, 0.1.697, 0.1.698, 0.1.700, 0.1.700.dev0, 0.1.700.dev1, 0.1.700.dev2, 0.1.700.dev3, 0.1.700.dev4, 0.1.700.dev5, 0.1.702, 0.1.704, 0.1.706, 0.1.714, 0.1.714.dev1, 0.1.715, 0.1.716, 0.1.719, 0.1.720, 0.1.721, 0.1.723, 0.1.724, 0.1.729, 0.1.736, 0.1.738, 0.1.743, 0.1.745, 0.1.746, 0.1.747, 0.1.748, 0.1.749, 0.1.750, 0.1.751, 0.1.758, 0.1.765, 0.1.769, 0.1.7701, 0.1.7713, 0.1.772, 0.1.774, 0.1.780, 0.1.781, 0.1.784, 0.1.786, 0.1.788, 0.1.789, 0.1.793, 0.1.794, 0.1.805, 0.1.806, 0.1.807, 0.1.813, 0.1.814, 0.1.815, 0.1.816, 0.1.817, 0.1.818, 0.1.819, 0.1.820, 0.1.821, 0.1.824, 0.10.0, 0.10.1, 0.11.1, 0.12.10, 0.12.11, 0.12.12, 0.12.4, 0.12.4.dev1, 0.12.4.dev2, 0.12.5, 0.12.5.dev1, 0.12.7, 0.12.7.dev1, 0.12.8, 0.12.9, 0.13.0, 0.13.1, 0.13.1.dev1, 0.13.1.dev2, 0.13.1.dev3, 0.13.2, 0.13.2.dev1, 0.13.3.dev1, 0.13.3.dev2, 0.13.6.dev1, 0.13.6.dev2, 0.13.6.dev3, 0.13.7.dev1, 0.14.0, 0.14.0.dev1, 0.14.1, 0.2.5, 0.2.6, 0.3.0, 0.3.1, 0.4.0, 0.4.4, 0.5.2, 0.5.3, 0.5.4, 0.5.6, 0.6.0, 0.6.1, 0.6.2, 0.6.6, 0.7.1, 0.7.1.dev1, 0.7.1.dev2, 0.7.1.dev3, 0.7.10, 0.7.3, 0.7.4, 0.7.5, 0.7.9, 0.8.0, 0.8.1, 0.8.2, 0.8.3, 0.8.4, 0.8.5, 0.8.6, 0.9.0, 0.9.1, 0.9.2, 0.9.2.dev1, 1.0.0, 1.0.0.dev1, 1.0.3, 1.0.3.dev1, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.10.0, 1.10.1, 1.10.10, 1.10.11, 1.10.2, 1.10.3, 1.10.4, 1.10.6, 1.10.8, 1.10.9, 1.10.dev11, 1.11.0, 1.11.1, 1.12.0, 1.12.1, 1.12.2, 1.12.3, 1.12.5, 1.12.5.dev1, 1.12.6.dev1, 1.12.6.dev2, 1.12.6.dev3, 1.12.6.dev4, 1.12.6.dev5, 1.13.2, 1.14.0, 1.14.0.dev1, 1.14.1, 1.14.10, 1.14.2, 1.14.3, 1.14.4, 1.14.5, 1.14.5.dev1, 1.14.6, 1.14.7, 1.14.8, 1.14.9, 1.15.0, 1.15.1, 1.15.10, 1.15.2, 1.15.3, 1.15.6, 1.15.7, 1.15.8, 1.16.0, 1.16.1, 1.16.11, 1.16.12, 1.16.18, 1.16.19, 1.16.2, 1.16.20, 1.16.21, 1.16.3, 1.16.4, 1.16.5, 1.16.6, 1.16.7, 1.16.8, 1.16.9, 1.17.0, 1.17.2, 1.17.3, 1.17.4, 1.17.5, 1.17.9, 1.18.0, 1.18.1, 1.18.13, 1.18.13.dev1, 1.18.13.dev4, 1.18.13.dev5, 1.18.14.dev8, 1.18.2, 1.18.6, 1.18.7, 1.18.8, 1.19.4, 1.2.0, 1.20.0, 1.20.5, 1.20.6, 1.20.7, 1.20.8, 1.20.9, 1.21.4.dev1, 1.21.6, 1.21.7, 1.22.3, 1.22.5, 1.23.0, 1.23.1, 1.23.15, 1.23.16, 1.23.2, 1.23.3, 1.23.5, 1.24.3, 1.24.5, 1.25.0, 1.25.1, 1.25.2, 1.26.0, 1.26.1, 1.26.13, 1.26.3, 1.26.8, 1.27.1.dev11, 1.27.1.dev30, 1.27.1.dev31, 1.27.1.dev40, 1.27.1.dev50, 1.27.1.dev60, 1.27.1.dev9, 1.27.4, 1.27.6, 1.27.8, 1.28.0, 1.28.1, 1.28.10, 1.28.11, 1.28.13, 1.28.4, 1.29.1, 1.29.3, 1.29.4.dev1, 1.29.7.dev3, 1.3.1, 1.3.3, 1.3.3.dev1, 1.3.3.dev2, 1.3.3.dev3, 1.30.0, 1.30.1, 1.30.1.dev5, 1.30.1.dev6, 1.30.3, 1.30.7, 1.31.13.dev1, 1.31.13.dev10, 1.31.13.dev2, 1.31.13.dev3, 1.31.14, 1.31.14.dev2, 1.31.14.dev3, 1.31.14.dev4, 1.31.14.dev5, 1.31.14.dev6, 1.31.14.dev8, 1.31.14.dev9, 1.31.15.dev2, 1.31.17, 1.31.2, 1.31.2.dev10, 1.31.3, 1.31.6, 1.31.8, 1.32.1, 1.32.4, 1.32.5.dev1, 1.32.9, 1.33.4, 1.33.5.dev1, 1.33.9, 1.34.0, 1.34.1, 1.34.11, 1.34.16, 1.34.18, 1.34.21, 1.34.22, 1.34.25, 1.34.29, 1.34.3, 1.34.37, 1.34.39, 1.34.4, 1.34.42, 1.34.6, 1.34.8, 1.35.0, 1.35.0.dev1, 1.35.1, 1.35.12, 1.35.17, 1.35.18, 1.35.2, 1.35.20, 1.35.21, 1.35.22, 1.35.23, 1.35.26, 1.35.28, 1.35.3, 1.35.31, 1.35.32, 1.35.35, 1.35.36, 1.35.38, 1.35.5, 1.35.7, 1.35.8, 1.36.0, 1.36.1, 1.36.2, 1.36.4, 1.37.0, 1.37.12, 1.37.14, 1.37.16, 1.37.19, 1.37.2, 1.37.20, 1.37.3, 1.37.7, 1.37.9, 1.38.0, 1.38.1, 1.38.10, 1.38.11, 1.38.12, 1.38.3, 1.38.4, 1.38.5, 1.38.7, 1.38.8, 1.39.2, 1.39.3, 1.39.4, 1.39.5, 1.39.5.dev1, 1.39.6, 1.4.0, 1.40.0, 1.40.0.dev1, 1.40.1, 1.40.1.dev1, 1.40.10, 1.40.11, 1.40.12, 1.40.13, 1.40.14, 1.40.15, 1.40.16, 1.40.17, 1.40.19, 1.40.2, 1.40.20, 1.40.21, 1.40.22, 1.40.24, 1.40.25, 1.40.26, 1.40.27, 1.40.28, 1.40.29, 1.40.3, 1.40.31, 1.40.4, 1.40.5, 1.40.6, 1.40.7, 1.40.8, 1.40.9, 1.41.0, 1.41.1, 1.41.11, 1.41.12, 1.41.13, 1.41.14, 1.41.15, 1.41.15.dev2, 1.41.17, 1.41.18, 1.41.19, 1.41.2, 1.41.20, 1.41.21, 1.41.22, 1.41.23, 1.41.24, 1.41.25, 1.41.26, 1.41.27, 1.41.28, 1.41.3, 1.41.4, 1.41.5, 1.41.6, 1.41.7, 1.41.8, 1.42.0, 1.42.1, 1.42.10, 1.42.11, 1.42.12, 1.42.2, 1.42.3, 1.42.4, 1.42.5, 1.42.6, 1.42.7, 1.42.8, 1.42.9, 1.43.0, 1.43.1, 1.43.10, 1.43.12, 1.43.13, 1.43.15, 1.43.16, 1.43.17, 1.43.18, 1.43.19, 1.43.2, 1.43.3, 1.43.4, 1.43.5, 1.43.6, 1.43.7, 1.43.9, 1.44.1, 1.44.10, 1.44.11, 1.44.12, 1.44.13, 1.44.14, 1.44.15, 1.44.16, 1.44.17, 1.44.18, 1.44.19, 1.44.2, 1.44.21, 1.44.22, 1.44.23, 1.44.24, 1.44.25, 1.44.26, 1.44.27, 1.44.28, 1.44.3, 1.44.4, 1.44.5, 1.44.6, 1.44.7, 1.44.8, 1.44.9, 1.45.0, 1.46.0, 1.46.1, 1.46.2, 1.46.4, 1.46.5, 1.46.6, 1.46.7, 1.46.8, 1.47.0, 1.47.1, 1.47.2, 1.48.0, 1.48.1, 1.48.10, 1.48.11, 1.48.12, 1.48.14, 1.48.15, 1.48.16, 1.48.17, 1.48.18, 1.48.19, 1.48.2, 1.48.3, 1.48.4, 1.48.5, 1.48.6, 1.48.7, 1.48.8, 1.48.9, 1.49.0, 1.49.1, 1.49.2, 1.49.3, 1.49.4, 1.49.5, 1.49.6, 1.49.7, 1.50.0, 1.50.1, 1.50.2, 1.50.4, 1.51.0, 1.51.1, 1.51.2, 1.51.3, 1.52.0, 1.52.1, 1.52.10, 1.52.11, 1.52.12, 1.52.14, 1.52.15, 1.52.16, 1.52.2, 1.52.3, 1.52.4, 1.52.5, 1.52.6, 1.52.8, 1.52.9, 1.53.1, 1.53.1.dev1, 1.53.2, 1.53.3, 1.53.4, 1.53.5, 1.53.6, 1.53.7, 1.53.8, 1.53.9, 1.54.0, 1.54.1, 1.55.0, 1.55.1, 1.55.10, 1.55.11, 1.55.12, 1.55.2, 1.55.3, 1.55.4, 1.55.6, 1.55.7, 1.55.8, 1.55.9, 1.56.10, 1.56.2, 1.56.3, 1.56.4, 1.56.5, 1.56.6, 1.56.8, 1.56.8.dev4, 1.56.8.dev5, 1.56.8.dev6, 1.56.8.dev7, 1.56.9, 1.57.0, 1.57.1, 1.57.10, 1.57.11, 1.57.2, 1.57.3, 1.57.4, 1.57.5, 1.57.7, 1.57.7.dev1, 1.57.8, 1.58.0, 1.58.1, 1.58.2, 1.58.4, 1.59.0, 1.59.1, 1.59.1.dev1, 1.59.10, 1.59.10.dev1, 1.59.12, 1.59.2, 1.59.3, 1.59.5, 1.59.6, 1.59.7, 1.59.8, 1.59.9, 1.6.0, 1.60.0, 1.60.2, 1.60.4, 1.60.5, 1.60.6, 1.60.7, 1.60.8, 1.60.9, 1.61.0, 1.61.0.dev1, 1.61.1, 1.61.11, 1.61.13, 1.61.15, 1.61.16, 1.61.17, 1.61.19, 1.61.2, 1.61.20, 1.61.3, 1.61.4, 1.61.5, 1.61.6, 1.61.7, 1.61.8, 1.61.9, 1.62.1, 1.62.4, 1.63.0, 1.63.0.dev12, 1.63.11, 1.63.11.dev1, 1.63.12, 1.63.14, 1.63.2, 1.63.3, 1.63.4.dev1, 1.63.5, 1.63.6, 1.63.7, 1.63.8, 1.64.1, 1.65.0, 1.65.0.post1, 1.65.1, 1.65.3, 1.65.4, 1.65.4.post1, 1.65.5, 1.65.6, 1.65.7, 1.65.8, 1.66.0, 1.66.1, 1.66.2, 1.66.3, 1.67.0, 1.67.0.post1, 1.67.1, 1.67.2, 1.67.4, 1.67.4.dev1, 1.67.4.post1, 1.67.5, 1.67.6, 1.68.0, 1.68.1, 1.68.1.dev1, 1.68.2, 1.69.0, 1.69.1, 1.69.2, 1.69.3, 1.7.1, 1.7.11, 1.7.12, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 1.7.7, 1.7.8, 1.7.9, 1.70.0, 1.70.2, 1.70.4, 1.71.0, 1.71.1, 1.71.2, 1.71.3, 1.72.0, 1.72.1, 1.72.2, 1.72.2.post1, 1.72.3, 1.72.4, 1.72.5.dev1, 1.72.5.dev2, 1.72.5.dev3, 1.72.6, 1.72.6.post1, 1.72.6.post2, 1.72.7, 1.72.7.dev1, 1.72.7.dev7, 1.72.9, 1.73.0, 1.73.0.post1, 1.73.0rc1, 1.73.1, 1.73.2, 1.73.6, 1.73.6.post1, 1.73.6rc2, 1.73.7, 1.73.7.dev1, 1.73.7.dev2, 1.73.7.dev3, 1.73.7.dev4, 1.74.0, 1.74.0.post1, 1.74.0.post2, 1.74.1, 1.74.12, 1.74.14, 1.74.15, 1.74.15.post1, 1.74.15.post2, 1.74.2, 1.74.3, 1.74.3.post1, 1.74.3rc1, 1.74.3rc2, 1.74.3rc3, 1.74.4, 1.74.4.dev1, 1.74.6, 1.74.7, 1.74.7.post1, 1.74.7.post2, 1.74.7rc1, 1.74.8, 1.74.8.dev2, 1.74.9, 1.74.9.dev1, 1.74.9.dev2, 1.74.9.post1, 1.74.9.post2, 1.75.0, 1.75.2, 1.75.3, 1.75.4, 1.75.5.post1, 1.75.5.post2, 1.75.6, 1.75.7, 1.75.8, 1.75.9, 1.76.0, 1.76.1, 1.76.2, 1.76.3, 1.77.0, 1.77.1, 1.77.2.post1, 1.77.3, 1.77.4, 1.77.4.dev1, 1.77.5, 1.77.7, 1.78.0, 1.78.0rc2, 1.78.2, 1.78.3, 1.78.4, 1.78.5, 1.78.6, 1.78.7, 1.79.0, 1.79.0.dev1, 1.79.0.dev2, 1.79.0.dev3, 1.79.1, 1.79.2, 1.79.3, 1.79.3.dev8, 1.8.1, 1.80.0, 1.80.10, 1.80.11, 1.80.12, 1.80.13, 1.80.15, 1.80.16, 1.80.17, 1.80.5, 1.80.6, 1.80.7, 1.80.8, 1.80.9, 1.81.0, 1.81.1, 1.81.10, 1.81.11, 1.81.12, 1.81.13, 1.81.14, 1.81.15, 1.81.16, 1.81.3, 1.81.4, 1.81.5, 1.81.6, 1.81.7, 1.81.8, 1.81.9, 1.81.9.dev1, 1.82.0, 1.82.1, 1.82.2, 1.82.3, 1.82.4, 1.82.5, 1.82.6, 1.9.0, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.dev0

    Additional upstream package constraints
    {
  "database": {
    "source": "https://github.com/pypa/advisory-database/blob/main/vulns/litellm/PYSEC-2026-2597.yaml"
  }
}
    PyPA · PYSEC-2026-2597 · Updated 2026-07-13T16:32:03.793894601Z

Vendor product assessments

Showing 32 of 130 vendor product statements; 98 omitted. Read the full vendor advisory.

  • registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:1a107e35bf15b706ec620d9140850c29a799ed9497f46f3c1c88dd0eb589ae61_arm64 as a component of Red Hat Ansible Automation Platform 2.6 · fixed

    Vendor assessment for this product only.

    pkg:oci/lightspeed-chatbot-rhel9@sha256%3A1a107e35bf15b706ec620d9140850c29a799ed9497f46f3c1c88dd0eb589ae61?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777398576

    • vendor fix: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade Vendor guidance
    • workaround: Limit network access to the LiteLLM service to trusted networks or hosts only. Implement firewall rules to restrict inbound connections to the LiteLLM service's port, ensuring that only authorized systems can reach the service. This reduces the exposure of the `/config/update` endpoint to unauthorized authenticated users.
    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:3857a27d9cca34556e6b9e7aa12706eab9e8fd140c0e25d0ab165048a569d439_s390x as a component of Red Hat Ansible Automation Platform 2.6 · fixed

    Vendor assessment for this product only.

    pkg:oci/lightspeed-chatbot-rhel9@sha256%3A3857a27d9cca34556e6b9e7aa12706eab9e8fd140c0e25d0ab165048a569d439?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777398576

    • vendor fix: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade Vendor guidance
    • workaround: Limit network access to the LiteLLM service to trusted networks or hosts only. Implement firewall rules to restrict inbound connections to the LiteLLM service's port, ensuring that only authorized systems can reach the service. This reduces the exposure of the `/config/update` endpoint to unauthorized authenticated users.
    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:7844a5a015b063eeff20461b531e6f5ddf8b59d6dacaf4cfcdcca48c977506d0_amd64 as a component of Red Hat Ansible Automation Platform 2.6 · fixed

    Vendor assessment for this product only.

    pkg:oci/lightspeed-chatbot-rhel9@sha256%3A7844a5a015b063eeff20461b531e6f5ddf8b59d6dacaf4cfcdcca48c977506d0?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777398576

    • vendor fix: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade Vendor guidance
    • workaround: Limit network access to the LiteLLM service to trusted networks or hosts only. Implement firewall rules to restrict inbound connections to the LiteLLM service's port, ensuring that only authorized systems can reach the service. This reduces the exposure of the `/config/update` endpoint to unauthorized authenticated users.
    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e5143dbaea707608ebf1f911b4e9e332a20a0c1c169c8ddc4c10569a9e07e0c5_ppc64le as a component of Red Hat Ansible Automation Platform 2.6 · fixed

    Vendor assessment for this product only.

    pkg:oci/lightspeed-chatbot-rhel9@sha256%3Ae5143dbaea707608ebf1f911b4e9e332a20a0c1c169c8ddc4c10569a9e07e0c5?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777398576

    • vendor fix: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade Vendor guidance
    • workaround: Limit network access to the LiteLLM service to trusted networks or hosts only. Implement firewall rules to restrict inbound connections to the LiteLLM service's port, ensuring that only authorized systems can reach the service. This reduces the exposure of the `/config/update` endpoint to unauthorized authenticated users.
    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:59a4a3dc01e258bdd6aa463c8dbb34e14bd1a8357ef6ae3d4ea9e6c8ce062353_arm64 as a component of Red Hat OpenShift AI 2.25 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-llama-stack-core-rhel9@sha256%3A59a4a3dc01e258bdd6aa463c8dbb34e14bd1a8357ef6ae3d4ea9e6c8ce062353?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-llama-stack-core-rhel9&tag=1781826406

    • vendor fix: For Red Hat OpenShift AI 2.25.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Limit network access to the LiteLLM service to trusted networks or hosts only. Implement firewall rules to restrict inbound connections to the LiteLLM service's port, ensuring that only authorized systems can reach the service. This reduces the exposure of the `/config/update` endpoint to unauthorized authenticated users.
    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:66cc80e961fe991b063dc51467fa901dce3fb2afc383afed1c596ec432363022_amd64 as a component of Red Hat OpenShift AI 2.25 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-llama-stack-core-rhel9@sha256%3A66cc80e961fe991b063dc51467fa901dce3fb2afc383afed1c596ec432363022?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-llama-stack-core-rhel9&tag=1781826406

    • vendor fix: For Red Hat OpenShift AI 2.25.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Limit network access to the LiteLLM service to trusted networks or hosts only. Implement firewall rules to restrict inbound connections to the LiteLLM service's port, ensuring that only authorized systems can reach the service. This reduces the exposure of the `/config/update` endpoint to unauthorized authenticated users.
    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:b6ec1fac474c9ff596322446656add0ebb10c449d623c37a3f71548957dc4c9c_amd64 as a component of Red Hat OpenShift AI 3.3 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-llama-stack-core-rhel9@sha256%3Ab6ec1fac474c9ff596322446656add0ebb10c449d623c37a3f71548957dc4c9c?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-llama-stack-core-rhel9&tag=1782310008

    • vendor fix: For Red Hat OpenShift AI 3.3.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Limit network access to the LiteLLM service to trusted networks or hosts only. Implement firewall rules to restrict inbound connections to the LiteLLM service's port, ensuring that only authorized systems can reach the service. This reduces the exposure of the `/config/update` endpoint to unauthorized authenticated users.
    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:ee821288511aaf6e91080f8a925a425e5d26eeacc73f042b39469c65c2e7a139_arm64 as a component of Red Hat OpenShift AI 3.3 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-llama-stack-core-rhel9@sha256%3Aee821288511aaf6e91080f8a925a425e5d26eeacc73f042b39469c65c2e7a139?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-llama-stack-core-rhel9&tag=1782310008

    • vendor fix: For Red Hat OpenShift AI 3.3.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    • workaround: Limit network access to the LiteLLM service to trusted networks or hosts only. Implement firewall rules to restrict inbound connections to the LiteLLM service's port, ensuring that only authorized systems can reach the service. This reduces the exposure of the `/config/update` endpoint to unauthorized authenticated users.
    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • redhat-user-workloads/lightspeed-stack as a component of Lightspeed Core · known affected

    Vendor assessment for this product only.

    pkg:oci/lightspeed-stack?repository_url=quay.io/redhat-user-workloads/lightspeed-core-tenant/lightspeed-stack

    • workaround: Limit network access to the LiteLLM service to trusted networks or hosts only. Implement firewall rules to restrict inbound connections to the LiteLLM service's port, ensuring that only authorized systems can reach the service. This reduces the exposure of the `/config/update` endpoint to unauthorized authenticated users.
    • none available: Affected
    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/aap-must-gather-rhel9@sha256:1879be3aafbece708fd6d586940f6db61e5effd235ffb236f107366004146a19_ppc64le as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/aap-must-gather-rhel9@sha256%3A1879be3aafbece708fd6d586940f6db61e5effd235ffb236f107366004146a19?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777163594

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/ansible-builder-rhel9@sha256:78bb601708c89ce1faa58e980d1b423c4498e469e514f6e4b16c997d12370b52_ppc64le as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/ansible-builder-rhel9@sha256%3A78bb601708c89ce1faa58e980d1b423c4498e469e514f6e4b16c997d12370b52?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777293525

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/ansible-dev-tools-rhel9@sha256:ab51737c0258483311e4ede2b82fdb922c969524eaa7c45dfc48d3fdcaf520d8_amd64 as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/ansible-dev-tools-rhel9@sha256%3Aab51737c0258483311e4ede2b82fdb922c969524eaa7c45dfc48d3fdcaf520d8?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777390240

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/controller-rhel9@sha256:4adc9ebce0716fe9b9f8c6b6604c5ab0481ce4c886b805f15476174d434a1912_s390x as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/controller-rhel9@sha256%3A4adc9ebce0716fe9b9f8c6b6604c5ab0481ce4c886b805f15476174d434a1912?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777377014

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9@sha256:ab0da105ec388adec982fdf764ff04e190ddbca309c7a993690a6e121a893d43_ppc64le as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/de-minimal-rhel9@sha256%3Aab0da105ec388adec982fdf764ff04e190ddbca309c7a993690a6e121a893d43?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777399713

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9@sha256:dd686595d1aadaffcf7bac93f62af54eea6bdfb22421c2dfa0f39c8c9b9acfa0_s390x as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/de-supported-rhel9@sha256%3Add686595d1aadaffcf7bac93f62af54eea6bdfb22421c2dfa0f39c8c9b9acfa0?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777402399

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9@sha256:b00858c99380fb965e200d69fc75f028c8b5b9ce653abb844b49013df8a35444_ppc64le as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/eda-controller-rhel9@sha256%3Ab00858c99380fb965e200d69fc75f028c8b5b9ce653abb844b49013df8a35444?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777296732

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/eda-controller-ui-rhel9@sha256:e2cff01ae7580087c28bca736d99d315c751b64de765622ece00f28cee9525ff_amd64 as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/eda-controller-ui-rhel9@sha256%3Ae2cff01ae7580087c28bca736d99d315c751b64de765622ece00f28cee9525ff?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777299088

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9@sha256:128a757b63856a6f014e985a962bf3dec109a91dc11578124b1d455dc6749fee_ppc64le as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/ee-supported-rhel9@sha256%3A128a757b63856a6f014e985a962bf3dec109a91dc11578124b1d455dc6749fee?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777391447

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/gateway-proxy-rhel9@sha256:874f03ad0a3ab9163ef7ac41d86459e54fbe1eec824adfbc70b3d6703ce120af_amd64 as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/gateway-proxy-rhel9@sha256%3A874f03ad0a3ab9163ef7ac41d86459e54fbe1eec824adfbc70b3d6703ce120af?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777163687

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/gateway-rhel9-operator@sha256:f67d315964083f1d05055584dcd24a713c9ee2f3a28de92bbaa2cdcd5fb22519_arm64 as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/gateway-rhel9-operator@sha256%3Af67d315964083f1d05055584dcd24a713c9ee2f3a28de92bbaa2cdcd5fb22519?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777163615

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/hub-rhel9-operator@sha256:0ddf22b33eb86a8254e5bb8ccbc819fcbfb91c985b4593c2ea7aa3025e48829a_s390x as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/hub-rhel9-operator@sha256%3A0ddf22b33eb86a8254e5bb8ccbc819fcbfb91c985b4593c2ea7aa3025e48829a?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777177318

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/hub-rhel9@sha256:2a6e77a0996f858ba3021cabe5481f3bba1921a15cbd7ccf345138ed282f9688_ppc64le as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/hub-rhel9@sha256%3A2a6e77a0996f858ba3021cabe5481f3bba1921a15cbd7ccf345138ed282f9688?arch=ppc64le&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777299023

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/hub-web-rhel9@sha256:99ea46e774f0c4667de04f51d559b2eea2b6487d58e64b1b0857572306092ba3_amd64 as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/hub-web-rhel9@sha256%3A99ea46e774f0c4667de04f51d559b2eea2b6487d58e64b1b0857572306092ba3?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777302345

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9@sha256:23c21f847c7fe2e3651a5d1152e46ac91ddf16bb6c6a367c3b9e437da0503ad7_arm64 as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/lightspeed-rhel9@sha256%3A23c21f847c7fe2e3651a5d1152e46ac91ddf16bb6c6a367c3b9e437da0503ad7?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777387242

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9@sha256:c6b320e8bb9678586e730c17001cd3429720e418cd659708f46766711c5eda34_amd64 as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/mcp-tools-rhel9@sha256%3Ac6b320e8bb9678586e730c17001cd3429720e418cd659708f46766711c5eda34?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777311601

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/platform-resource-rhel9-operator@sha256:ce5f39610ef1058c8814565232181936c5f147a9f1fa97de4b0e74202ae56b5f_arm64 as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/platform-resource-rhel9-operator@sha256%3Ace5f39610ef1058c8814565232181936c5f147a9f1fa97de4b0e74202ae56b5f?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777163557

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-26/receptor-rhel9@sha256:cb6dc7c0bd4ef6ca7b97e4369b8ee730e93ee15e3f362c1f59eb75f8719e6df2_arm64 as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/receptor-rhel9@sha256%3Acb6dc7c0bd4ef6ca7b97e4369b8ee730e93ee15e3f362c1f59eb75f8719e6df2?arch=arm64&repository_url=registry.redhat.io/ansible-automation-platform-26&tag=1777391542

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-tech-preview/mcp-server-rhel9@sha256:4de0bbd1958c1c709bb57b475aea2f7d4beb4d82a0db4b67b5688b271e277b77_s390x as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/mcp-server-rhel9@sha256%3A4de0bbd1958c1c709bb57b475aea2f7d4beb4d82a0db4b67b5688b271e277b77?arch=s390x&repository_url=registry.redhat.io/ansible-automation-platform-tech-preview&tag=1777386606

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform-tech-preview/metrics-service-rhel9@sha256:01dd2d20134419a05dccbbc18bb88f68884b780c2aa0bc28667dcd5e317d047f_amd64 as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/metrics-service-rhel9@sha256%3A01dd2d20134419a05dccbbc18bb88f68884b780c2aa0bc28667dcd5e317d047f?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform-tech-preview&tag=1777394269

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:a6f711ac57bf1a1de8e9121a25cf2af3462168c8d1e2fb7b0d6b5eb26e73aafe_amd64 as a component of Red Hat Ansible Automation Platform 2.6 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/platform-operator-bundle@sha256%3Aa6f711ac57bf1a1de8e9121a25cf2af3462168c8d1e2fb7b0d6b5eb26e73aafe?arch=amd64&repository_url=registry.redhat.io/ansible-automation-platform&tag=1777410604

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • registry.redhat.io/rhoai/odh-operator-bundle@sha256:163f636a1cbc151572ad0470bd5b06650980efd72e6c462cff6ce9ce4bcfaa93_amd64 as a component of Red Hat OpenShift AI 3.3 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-operator-bundle@sha256%3A163f636a1cbc151572ad0470bd5b06650980efd72e6c462cff6ce9ce4bcfaa93?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-operator-bundle&tag=1782332801

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00
  • rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known not affected

    Vendor assessment for this product only.

    Reason: component not present

    pkg:oci/odh-mlflow-rhel9?repository_url=quay.io/rhoai/odh-mlflow-rhel9

    Red Hat · CVE-2026-35029 · Updated 2026-06-30T03:53:19+00:00

Unverified PoC candidates

Catalogue matches for further research. These repositories have not been validated as working exploits.

1 candidate

Additional exploitation reports

Source-specific reports, separate from CISA KEV. Repeated observations from one source are not independent confirmations.

  • VulnCheck KEV · 2026-04-06T00:00:00Z

    Source guidance: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

    Source ransomware assessment: Unknown

    VulnCheck KEV · CVE-2026-35029 · Updated 2026-04-06T00:00:00Z
  • VulnCheck KEV · 2026-04-06T00:00:00ZVulnCheck KEV · CVE-2026-35029

Known Affected Software Configurations

VendorProductVersion range
LitellmLitellm< 1.83.0

All CVSS metrics

  • HIGH 8.7 v4.0 · CNA Primary
    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N
  • HIGH 8.8 v3.1 · ADP Primary
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • HIGH 8.7 v4.0 · NVD Secondary
    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • HIGH 8.8 v3.1 · NVD Primary
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Patches & mitigations

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS