Vulnerabilitycritical
CVE-2026-42208: LiteLLM bug exploited 36 hours after its disclosure
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-42208 | SQL Injection in BerriAI LiteLLM Proxy Exploited in the Wild | 9.3 | 89% | KEVPoC | KEV |
From the original article
2 min read at securityaffairs.com
Attackers quickly exploited a critical LiteLLM flaw (CVE-2026-42208) to access and modify sensitive database data via SQL injection. Attackers rapidly exploited a critical vulnerability in LiteLLM Python package, tracked as CVE-2026-42208, just days after it became public. The vulnerability, an SQL injection in the proxy API key verification process, lets attackers access and potentially modify database data.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.