CVE-2026-42208
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could send a specially crafted Authorization header to any LLM API route (for example POST /chat/completions) and reach this query through the proxy's error-handling path. An attacker could read data from the proxy's database and may be able to modify it, leading to unauthorised access to the proxy and the credentials it manages. This issue has been patched in version 1.83.7.
Fix
Public exploits 7
- BerriAI LiteLLM Proxy Pre-Auth SQL Injection Scanner (auxiliary module) Metasploit · 2026-04-20
- 0xBlackash/CVE-2026-42208 PoC on GitHub
- HAERIN-L/poc_cve-2026-42208 PoC on GitHub
- Zeltoc/threat-intel-brief-cve-2026-42208-litellm PoC on GitHub
- imjdl/CVE-2026-42208_lab PoC on GitHub
- ridhinva/litellm-sqli-scanner PoC on GitHub
- rootdirective-sec/CVE-2026-42208-Lab PoC on GitHub
Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.
CISA KEV required action · due 2026-05-11
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Added to the catalog 2026-05-08. CISA KEV
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmc Mitigation, Patch, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2463965 Mitigation, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 9.3 · in KEV · litellmNVD modified 2026-10-26 20:10
Affected (CPE criteria) 1
cpe:2.3:a:litellm:litellm:*:*:*:*:*:*:*:*
References 6
- https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable Product, Release Notes
- https://github.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmc Mitigation, Patch, Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-42208 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2463965 Mitigation, Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42208.json Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42208 US Government Resource