LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-42208 | SQL Injection in BerriAI LiteLLM Proxy Exploited in the Wild | 9.3 | 89% | KEVPoC | KEV |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Apr 29, 2026 Vulnerability / Cloud Security In yet another instance of threat actors quickly jumping on the exploitation bandwagon, a newly disclosed critical security flaw in BerriAI's LiteLLM Python package has come under active exploitation in the wild within 36 hours of the bug becoming public knowledge. The vulnerability, tracked as CVE-2026-42208 (CVSS score: 9.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.