CVE-2026-42208
Description
CVE-2026-42208 is a critical SQL injection vulnerability in BerriAI LiteLLM (CVSS 9.8) allowing unauthenticated database access and credential theft.
CPE
| Product | Version Start | Version End (excl.) | Status |
|---|---|---|---|
| litellm | 1.81.16 | 1.83.7 | vulnerable |
Related weakness (CWE)
Remediation plan
Apply official patches
Immediately update LiteLLM to version 1.83.7 or later. This version replaces vulnerable string concatenation in database queries with parameterized inputs, effectively neutralizing the SQL injection vector.
Update affected systems
Identify all deployments running LiteLLM versions 1.81.16 through 1.83.6. Ensure that all containerized environments, cloud instances, and local installations are transitioned to the patched version (1.83.7) to prevent unauthorized access.
Restrict access
Deploy a Web Application Firewall (WAF) to inspect and filter incoming traffic for SQL injection patterns within HTTP headers. Limit network access to the LiteLLM proxy to trusted internal IP ranges or VPNs to reduce the attack surface.
Monitor for exploitation
Review application logs for error-handling events triggered during API key validation. If signs of exploitation are found, such as unusual database queries or unauthorized data access, immediately rotate all LLM API credentials managed by the proxy.
Detection Guidance
"Monitor HTTP request logs for malformed strings or SQL syntax (e.g., single quotes, comments, or boolean logic) within the 'Authorization' header. Specifically, watch for requests to /chat/completions that trigger database errors. Security teams should also deploy WAF signatures targeting CWE-89 (SQL Injection) to detect attempts to manipulate the proxy's backend database via header-based injection."