LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure

BerriAI's LiteLLM Python package suffered a critical SQL injection vulnerability (CVE-2026-42208, CVSS 9.3) that was actively exploited within 36 hours of public disclosure.

• •Unauthenticated attackers can send crafted Authorization headers to modify the LiteLLM proxy database and extract sensitive credentials
• •Affected versions: >=1.81.16 to <1.83.7; patched in version 1.83.7-stable (April 19, 2026)
• •First exploitation recorded 26 hours after public disclosure on April 26, 2026
• •Attackers targeted credential tables containing LLM provider keys and proxy configuration
• •Immediate patching required; alternatively, set disable_error_logs: true configuration

This summary was automatically generated by AI based on the original article and may not be fully accurate.