Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/04/24 4:17 p.m.•176 views

LiteLLM has SQL Injection in Proxy API key verification

Impact A database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could send a specially crafted Authorization header to any LLM API route for example POST /chat/completions a...

9.8CVSS6.2AI score0.05772EPSS
SaveExploits8References10Affected Software1
Rows per page
Query Builder