CVE-2026-89032: BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that al

BerriAI LiteLLM before version 1.101.0-rc.1 has a tenant isolation bypass vulnerability in its semantic cache layer (a system that stores and reuses AI responses based on meaning rather than exact text matching). Authenticated attackers with a valid virtual key can exploit a mismatch in how the system tracks which tenant owns cached data, allowing them to read other tenants' sensitive information like personal data or source code, and potentially trick AI systems into running malicious commands under someone else's account.