All vulnerabilities
CVE-2026-42208GHSA-r75f-5x8p-qvmcPYSEC-2026-391

BerriAI LiteLLM SQL Injection Vulnerability

BerriAI LiteLLMpipLibraries & packages
Open in ThreatlineRecord JSON
CVSS
9.3Critical
ExploitationExploited in the wildAdded to KEV 8 May 2026CISA KEV
Exploit odds (EPSS)5.77%Chance of exploitation activity in the next 30 days, higher than 93% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.83.7Fixed versionGitHub
Federal deadline11 May 2026Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

  • 1.83.7litellm, pipGitHub
  • 1.83.7litellm, PyPIOSVpip install "litellm>=1.83.7"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 20 Apr 2026Exploit code publicMetasploit
  2. 8 May 2026, 03:38 UTCPublishedCVE List
  3. 8 May 2026Added to CISA KEVCISA KEV

Campaigns 1

From published threat research, as each report states it.

Public exploit code and templates 2

  • Auxiliary moduleBerriAI LiteLLM Proxy Pre-Auth SQL Injection Scanner 20 Apr 2026Metasploit
  • Scanner templateLiteLLM - SQL InjectionNuclei

Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.

Description

BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized access to the proxy and the credentials it manages.

Text from CVE List

Affected versions 19

  • litellm, pip>= 1.81.16, < 1.83.7GitHub
  • litellmaffected: >= 1.81.16, < 1.83.7CVE List
  • litellm, pip>=1.81.16, <1.83.7GitHub
  • litellm, PyPIfrom 1.81.16, fixed in 1.83.7OSV
  • litellm, PyPI1.81.16OSV
  • litellm, PyPI1.82.0OSV
  • litellm, PyPI1.82.1OSV
  • litellm, PyPI1.82.2OSV
  • litellm, PyPI1.82.3OSV
  • litellm, PyPI1.82.4OSV
  • litellm, PyPI1.82.5OSV
  • litellm, PyPI1.82.6OSV
  • litellm, PyPI1.83.0OSV
  • litellm, PyPI1.83.1OSV
  • litellm, PyPI1.83.2OSV
  • litellm, PyPI1.83.3OSV
  • litellm, PyPI1.83.4OSV
  • litellm, PyPI1.83.5OSV
  • litellm, PyPI1.83.6OSV

References 11