Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-42208

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could send a specially crafted Authorization header to any LLM API route (for example POST /chat/completions) and reach this query through the proxy's error-handling path. An attacker co
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d9b6960c624e4df01d185c0a517c39916e2276e313aeaa379038ed575f45e8db
Known exploited
CISA KEV
Disputed
No
Stale source
No
Conflicts
3

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 5 assertions

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:lightspeed_core"],"defaultStatus":"unaffected","packageName":"lightspeed-core/lightspeed-stack-rhel9","product":"Lightspeed Core","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/1/affected/0

{"product":"litellm","vendor":"BerriAI","versions":[{"status":"affected","version":">= 1.81.16, < 1.83.7"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/cna/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-mlflow-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/1/affected/3

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"unaffected","packageName":"ansible-automation-platform-26/lightspeed-chatbot-rhel9","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/1/affected/1

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-llama-stack-core-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/1/affected/2
cvss · 2 assertions

{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":9.3,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/cna/metrics/0/cvssV4_0

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/1/metrics/1/cvssV3_1
cwe · 2 assertions

{"cweId":"CWE-89","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/1/problemTypes/0/descriptions/0

{"cweId":"CWE-89","description":"CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/cna/problemTypes/0/descriptions/0

Affected products and versions

5 source assertions
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:lightspeed_core"],"defaultStatus":"unaffected","packageName":"lightspeed-core/lightspeed-stack-rhel9","product":"Lightspeed Core","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/1/affected/0
{"product":"litellm","vendor":"BerriAI","versions":[{"status":"affected","version":">= 1.81.16, < 1.83.7"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/cna/affected/0
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-mlflow-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/1/affected/3
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"unaffected","packageName":"ansible-automation-platform-26/lightspeed-chatbot-rhel9","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/1/affected/1
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-llama-stack-core-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/1/affected/2

Provider-owned CVSS observations

2 source assertions
{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":9.3,"baseSeverity":"CRITICAL","privilegesRequired":"NONE","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/cna/metrics/0/cvssV4_0
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/1/metrics/1/cvssV3_1

CWE assertions

2 source assertions
{"cweId":"CWE-89","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/1/problemTypes/0/descriptions/0
{"cweId":"CWE-89","description":"CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/cna/problemTypes/0/descriptions/0

Known exploitation assertions

2 source assertions
{"cwes":["CWE-89"],"dateAdded":"2026-05-08","dueDate":"2026-05-11","knownRansomwareCampaignUse":"Unknown","notes":"https://github.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmc ; https://nvd.nist.gov/vuln/detail/CVE-2026-42208","product":"LiteLLM","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","shortDescription":"BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially …
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:d125feec83f38340090311451e8691eb89876ea896285bb22fa2bebb43a2c4ff · sha256:635dff916c4092c0… · /vulnerabilities/70
    Open source location →
{"cwes":["CWE-89"],"dateAdded":"2026-05-08","dueDate":"2026-05-11","knownRansomwareCampaignUse":"Unknown","notes":"https://github.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmc ; https://nvd.nist.gov/vuln/detail/CVE-2026-42208","product":"LiteLLM","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","shortDescription":"BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially …
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:99ced719468f364b57960c8850925859b02e0da10e3ebeff409bd2c9b7a6db28 · sha256:16acee8334e59e44… · /vulnerabilities/67
    Open source location →

Source references

6 source assertions
{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-42208"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/1/references/0
{"name":"RHBZ#2463965","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2463965"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/1/references/1
{"name":"https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable","tags":["x_refsource_MISC"],"url":"https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/cna/references/1
{"name":"https://github.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmc","tags":["x_refsource_CONFIRM"],"url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/cna/references/0
{"tags":["x_sadp-csaf-vex"],"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42208.json"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/1/references/2
{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42208"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:31e690cec901b79f68bea08b7663a6e64a7cf9a1e37bc8f4090097aed7085f91 · sha256:3d95be0cc3497a99… · /containers/adp/0/references/0

Attribution and limitations

  • CISA Known Exploited Vulnerabilities JSON: CISA named for provenance; do not use CISA/DHS marks or imply endorsement Source →
  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer