Critical LiteLLM Flaw Enables Database Attacks Through SQL Injection
ID: bd065cc9-16cd-572c-8051-55c38ee73a5a
STIX ID: report--bd065cc9-16cd-572c-8051-55c38ee73a5a
Feed Name: GBHackers
Threat Score
A critical pre-auth SQL injection (CVE-2026-42208) in the LiteLLM gateway allows unauthenticated attackers to run arbitrary SQL queries and extract high-value secrets (API keys, provider credentials, and configuration). Exploitation was observed within 36 hours of public indexing, with targeted, sophisticated extraction techniques; administrators are urged to upgrade to LiteLLM 1.83.7 and rotate any exposed secrets immediately.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.