Lucene search
+L

7 matches found

Kitploit
Kitploit
added 2026/09/15 1:55 a.m.12 views

litellm-sqli-scanner

Escáner de inyección SQL LiteLLM CVE-2026-42208 — inyección SQL en LiteLLM Proxy Detecta y valida CVE-2026-42208: vulnerabilidad de inyección SQL en la capa de base de datos de LiteLLM Proxy. Solo para pruebas de seguridad autorizadas. Características Detección de inyección SQL CVE-2026-42208...

9.8CVSS6.5AI score0.8942EPSS
SaveExploits8
Github Security Blog
Github Security Blog
added 2026/06/26 8:51 p.m.33 views

semantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pin

Impact semantic-router versions 0.1.8 through 0.1.14 declare litellm=1.61.3 with no upper bound. During the window in which litellm==1.82.8 was the latest release on PyPI, a fresh install of any affected semantic-router version could resolve to that compromised wheel. The malicious litellm==1.82....

9.8CVSS6.2AI score0.8942EPSS
SaveExploits8References2Affected Software1
GithubExploit
GithubExploit
added 2026/05/30 4:51 a.m.192 views

Exploit for SQL Injection in Litellm

CVE-2026-42208 — LiteLLM Pre-Authentication SQL Injection A l...

9.8CVSS6.1AI score0.8942EPSS
SaveExploits8
GithubExploit
GithubExploit
added 2026/05/22 11:22 p.m.172 views

Exploit for SQL Injection in Litellm

CVE-2026-42208 — LiteLLM SQL Injection Scanner 🤖 Detects SQL...

9.8CVSS6.1AI score0.8942EPSS
SaveExploits8
GithubExploit
GithubExploit
added 2026/05/10 2:07 a.m.256 views

Exploit for SQL Injection in Litellm

Threat Intelligence Brief - CVE-2026-42208: BerriAI LiteLLM SQ...

9.8CVSS6.1AI score0.8942EPSS
SaveExploits8
attackerkb
attackerkb
added 2026/05/08 3:38 a.m.23 views

CVE-2026-42208

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An...

9.8CVSS6AI score0.8942EPSS
SaveIn wildExploits8References5Affected Software1
The Hacker News
The Hacker News
added 2026/04/29 5:34 a.m.36 views

LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure

In yet another instance of threat actors quickly jumping on the exploitation bandwagon, a newly disclosed critical security flaw in BerriAI's LiteLLM Python package has come under active exploitation in the wild within 36 hours of the bug becoming public knowledge. The vulnerability, tracked as...

9.8CVSS6.2AI score0.8942EPSS
SaveExploits8
Rows per page
Query Builder