Skip to content

CVE · Exploited · On CISA KEV

CVE-2026-42208

BerriAI LiteLLM SQL Injection Vulnerability

9.8
CVSS 3.1
1
story
MAY 8
added to KEV
Severity
9.8 Critical · NVD score
Vendor
BerriAI
Product
LiteLLM
Published
May 8, 2026
Added to KEV
May 8, 2026
KEV deadline
May 11, 2026
Ransomware use
Unknown
Weakness
CWE-89

What it is

BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized access to the proxy and the credentials it manages.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. AIYour LLM Is Showing: New Data Finds Sharp Rise in Exposed AI ToolsExposures of AI/LLM tools has risen by more than 60 percent over the last nine months.DENNIS FISHER · 2 MIN

Official references

7 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Fixgithub.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmcFixbugzilla.redhat.com/show_bug.cgiAnalysisaccess.redhat.com/security/cve/CVE-2026-42208Analysissecurity.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42208.json