7 matches found
litellm-sqli-scanner
Escáner de inyección SQL LiteLLM CVE-2026-42208 — inyección SQL en LiteLLM Proxy Detecta y valida CVE-2026-42208: vulnerabilidad de inyección SQL en la capa de base de datos de LiteLLM Proxy. Solo para pruebas de seguridad autorizadas. Características Detección de inyección SQL CVE-2026-42208...
semantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pin
Impact semantic-router versions 0.1.8 through 0.1.14 declare litellm=1.61.3 with no upper bound. During the window in which litellm==1.82.8 was the latest release on PyPI, a fresh install of any affected semantic-router version could resolve to that compromised wheel. The malicious litellm==1.82....
Exploit for SQL Injection in Litellm
CVE-2026-42208 — LiteLLM Pre-Authentication SQL Injection A l...
Exploit for SQL Injection in Litellm
CVE-2026-42208 — LiteLLM SQL Injection Scanner 🤖 Detects SQL...
Exploit for SQL Injection in Litellm
Threat Intelligence Brief - CVE-2026-42208: BerriAI LiteLLM SQ...
CVE-2026-42208
LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An...
LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure
In yet another instance of threat actors quickly jumping on the exploitation bandwagon, a newly disclosed critical security flaw in BerriAI's LiteLLM Python package has come under active exploitation in the wild within 36 hours of the bug becoming public knowledge. The vulnerability, tracked as...