{
 "id": "AIR-2026-0199",
 "slug": "cve-2026-89032-berriai-litellm-semantic-cache-tenant-isolati",
 "title": "CVE-2026-89032: BerriAI LiteLLM semantic cache tenant isolation bypass",
 "summary": "A metadata key mismatch in BerriAI LiteLLM's semantic cache layer permits authenticated tenants to retrieve cached responses belonging to other users. This exposes sensitive information such as PII and source code.",
 "type": "attack_on_ai",
 "categories": [
  "data_leak",
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "LiteLLM"
 ],
 "incident_date": "2026-09-25",
 "incident_date_precision": "day",
 "first_reported": "2026-09-25",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89032",
   "publisher": "NVD",
   "title": "CVE-2026-89032: BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that allows…",
   "published_at": "2026-09-25"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-89032",
  "litellm",
  "cache-poisoning"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}