CVE-2025-45809-PoC

CVE-2025-45809 — LiteLLM SQL Injection via /key/block Time-Based Blind SQLi LiteLLM v1.65.4 versions before v1.81.0 /key/block and /key/unblock endpoints have a SQL injection vulnerability in the key parameter. Attackers can use time-based blind injection techniques to steal database content and...

CVE-2025-45809

BerriAI LiteLLM versions prior to v1.81.0 (including v1.65.4) are vulnerable to a SQL Injection (CWE-89) flaw in the key parameter of the /key/block and /key/unblock API endpoints. The root cause is the use of f-string concatenation instead of parameterized queries , allowing attackers to utilize...