CVE-2026-42208

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-42208
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42208.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-42208
Aliases
Downstream
Related
Published
2026-05-08T03:38:14.124Z
Modified
2026-07-16T03:31:10.953683891Z
Severity
  • 9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
LiteLLM: SQL injection in Proxy API key verification
Details

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could send a specially crafted Authorization header to any LLM API route (for example POST /chat/completions) and reach this query through the proxy's error-handling path. An attacker could read data from the proxy's database and may be able to modify it, leading to unauthorised access to the proxy and the credentials it manages. This issue has been patched in version 1.83.7.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42208.json",
    "cwe_ids": [
        "CWE-89"
    ],
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/berriai/litellm

Affected ranges

Type
GIT
Repo
https://github.com/berriai/litellm
Events
Introduced
4d2fab49a7b947f329288c696101d1a678e49ede
Fixed
e0d5c28db02b3219dbd944666a55f49732197922
Database specific 
{
    "cpe": "cpe:2.3:a:litellm:litellm:*:*:*:*:*:*:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "1.81.16"
        },
        {
            "fixed": "1.83.7"
        }
    ]
}

Affected versions

v1.*
v1.81.16.custm-auth.dev
v1.82.1-nightly
v1.82.1-silent-dev2
v1.82.1.rc.1
v1.82.4-nightly
v1.82.5.dev.1
v1.82.6.dev2
v1.83.0-nightly
v1.83.1-nightly
v1.83.2-nightly
v1.83.3-stable
v1.83.3.rc.1
v1.83.5-nightly
v1.83.6-nightly
v1.83.7.rc.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42208.json"