litellm-sqli-scanner

LiteLLM SQL Injection Scanner CVE-2026-42208 — SQL injection in LiteLLM Proxy Detects and validates CVE-2026-42208: SQL injection vulnerability in LiteLLM Proxy's database layer. For authorized security testing only. Features CVE-2026-42208 SQL injection detection LiteLLM Proxy version...

semantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pin

Impact semantic-router versions 0.1.8 through 0.1.14 declare litellm=1.61.3 with no upper bound. During the window in which litellm==1.82.8 was the latest release on PyPI, a fresh install of any affected semantic-router version could resolve to that compromised wheel. The malicious litellm==1.82....

Exploit for SQL Injection in Litellm

CVE-2026-42208 — LiteLLM Pre-Authentication SQL Injection A l...

Exploit for SQL Injection in Litellm

CVE-2026-42208 — LiteLLM SQL Injection Scanner 🤖 Detects SQL...

Exploit for SQL Injection in Litellm

Threat Intelligence Brief - CVE-2026-42208: BerriAI LiteLLM SQ...

0xpwn (0.1.1), a2a-acl (0.0.14) +247 more potentially affected by CVE-2026-42208 via litellm (>=1.81.16, <=1.83.4)

litellm PYPI version =1.81.16, =0.7.3, =1.0.1, =1.0.2, =0.1.46, =0.25.4a2, =0.1.2, =0.1.0a6, =0.1.0, =0.1.14.13, =0.0.0.post0, =2.4.64 and more Source cves: CVE-2026-42208 Source advisory: MEND:CVE-2026-42208...

CVE-2026-42208

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An...

LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure

In yet another instance of threat actors quickly jumping on the exploitation bandwagon, a newly disclosed critical security flaw in BerriAI's LiteLLM Python package has come under active exploitation in the wild within 36 hours of the bug becoming public knowledge. The vulnerability, tracked as...

0xpwn (0.1.1), a2a-acl (0.0.14) +247 more potentially affected by CVE-2026-42208 via litellm (>=1.81.16, <=1.83.4)

litellm PYPI version =1.81.16, =0.7.3, =1.0.1, =1.0.2, =0.1.46, =0.25.4a2, =0.1.2, =0.1.0a6, =0.1.0, =0.1.14.13, =0.0.0.post0, =2.4.64 and more Source cves: CVE-2026-42208 Source advisory: GHSA-R75F-5X8P-QVMC...