CVE-2025-45809

BerriAI LiteLLM versions prior to v1.81.0 (including v1.65.4) are vulnerable to a SQL Injection (CWE-89) flaw in the key parameter of the /key/block and /key/unblock API endpoints. The root cause is the use of f-string concatenation instead of parameterized queries , allowing attackers to utilize...

CVE-2025-45809

SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints...