CVE-2026-42208

BerriAI LiteLLM SQL Injection Vulnerability

Litellm

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could send a specially crafted Authorization header to any LLM API route (for example POST /chat/completions) and reach this query through the proxy's error-handling…

8. Mai 2026

Ausgewertete Quellen

• Red Hat
  https://access.redhat.com/security/cve/CVE-2026-42208
• Red Hat
  https://bugzilla.redhat.com/show_bug.cgi?id=2463965
• Red Hat
  https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42208.json
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42208
• CISA
  BerriAI LiteLLM SQL Injection Vulnerability
• NVD
  CVE-2026-42208
• GitHub
  https://github.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmc