Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/24 4:17 p.m.158 views

LiteLLM has SQL Injection in Proxy API key verification

Impact A database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could send a specially crafted Authorization header to any LLM API route for example POST /chat/completions a...

9.8CVSS6AI score0.8942EPSS
SaveExploits8References5Affected Software1
Rows per page
Query Builder