{"data":{"id":"2d208365-42c7-4d1f-9524-83bc2c48eac0","title":"CVE-2026-89032: BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that…","summary":"BerriAI LiteLLM versions before 1.101.0-rc.1 contain a tenant isolation bypass in the semantic cache layer, tracked as CVE-2026-89032. A metadata key mismatch between _get_semantic_cache_tenant_scope() and _get_metadata_variable_name() lets an authenticated user with a valid virtual key submit semantically similar prompts on routes such as /v1/responses and /bedrock/* and retrieve other tenants' cached responses, including personally identifiable information, financial data or source code. Attackers can also cause agentic front-ends to auto-execute attacker-supplied tool calls under victim credentials.","solution":"N/A -- no mitigation discussed in source.","labels":["security","privacy"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-89032","publishedAt":"2026-09-25T17:17:18.793Z","cveId":"CVE-2026-89032","cweIds":["CWE-863"],"cvssScore":"7.7","cvssSeverity":"high","severity":"high","attackType":["pii_leakage","other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LiteLLM","Amazon Bedrock"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"BerriAI LiteLLM tenant isolation bypass in semantic cache layer","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N","attackVector":"network","attackComplexity":"high","privilegesRequired":"low","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00272,"epssCheckedAt":"2026-11-10T06:09:41.675Z","kevDateAdded":null,"advisoryAliases":["GHSA-237m-2qxv-ww7c"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-08T06:09:35.010Z","patchAvailable":null,"disclosureDate":"2026-09-25T17:17:18.793Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[]}}