CVE-2026-42271: Improper Neutralization of Special Elements used in a Command

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list — accepted a full server configuration i...

LiteLLM 命令注入漏洞

LiteLLM is an open-source application developed by Berri AI. It can utilize all LLM APIs in the OpenAI format. Versions of LiteLLM from 1.74.2 to 1.83.7 contained a command injection vulnerability. This vulnerability stemmed from two endpoints used for previewing the MCP server accepting complete...

CVE-2026-42208: Improper Neutralization of Special Elements used in an SQL Command

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An...

CVE-2026-42203 vulnerabilities

Vulnerabilities for packages: airflow, litellm...

CVE-2026-41314 vulnerabilities

Vulnerabilities for packages: nemo, litellm, open-webui...

CVE-2026-42271 vulnerabilities

Vulnerabilities for packages: airflow, litellm...

CVE-2026-41312 vulnerabilities

Vulnerabilities for packages: nemo, litellm, open-webui...

CVE-2026-41313 vulnerabilities

Vulnerabilities for packages: nemo, litellm, open-webui...

CVE-2026-41168 vulnerabilities

Vulnerabilities for packages: nemo, litellm, open-webui...

CVE-2026-42208 vulnerabilities

Vulnerabilities for packages: airflow, litellm...

GHSA-R75F-5X8P-QVMC vulnerabilities

Vulnerabilities for packages: airflow, litellm...

GHSA-HP6R-R9VC-Q8WX vulnerabilities

Vulnerabilities for packages: litellm...

CVE-2025-14546 vulnerabilities

Vulnerabilities for packages: litellm...

GHSA-V4P8-MG3P-G94G vulnerabilities

Vulnerabilities for packages: airflow, litellm...

GHSA-XQMJ-J6MV-4862 vulnerabilities

Vulnerabilities for packages: airflow, litellm...

📄 LiteLLM 1.83.0 Insecure Direct Object Reference

LiteLLM exposes a /config/update API endpoint that allows administrators to make configuration changes to the instance. Due to a missing authorization check, low-privileged users can access this endpoint without restriction. An attacker with a low-privileged account can exploit this to exfiltrate...

CVE-2026-42208

A flaw was found in LiteLLM. A database query used for proxy API key checks incorrectly incorporated caller-supplied key values directly into the query. This vulnerability allows an unauthenticated attacker to send a specially crafted Authorization header to any Large Language Model LLM API route...

Exploit for CVE-2026-42208

LiteLLM Proxy SQL Injection GHSA-r75f-5x8p-qvmc A reproduct...

SQL Injection

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to SQL Injection via the token lookup query in the combined view path. An attacker can extract or manipulate records by supplying a crafted token value that is interpolated...

Improper Neutralization of Special Elements Used in a Template Engine

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the POST /prompts/test endpoint, which accepts user-supplied prompt templates and renders them...