← Back to Vulnerability Reports CVE Intelligence

CVE-2026-42208

BerriAI LiteLLM•CRITICAL · CVSS 9.8• In the wild In CISA KEV

What is CVE-2026-42208?

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could send a specially crafted Authorization header to any LLM API route (for example POST /chat/completions) and reach this query through the proxy's error-handling path. An attacker could read data from the proxy's database and may be able to modify it, leading to unauthorised access to the proxy and the credentials it manages. This issue has been patched in version 1.83.7.

CVSS9.8 NVD 3.1

SeverityCRITICAL

Exploitation In the wild In CISA KEV

EPSS6% · P93

Triage statusActive Exploit

ActionPatch immediately

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWECWE-89

NVD published2026-05-08

NVD last modified2026-07-15

Timeline

2026-04-29First covered in a defend.network daily briefing
2026-05-08Published to the U.S. National Vulnerability Database (NVD)
2026-05-08Added to the CISA Known Exploited Vulnerabilities (KEV) catalog
2026-05-11CISA federal remediation deadline (BOD 22-01)
2026-07-15NVD record last updated

CISA Known Exploited Vulnerability

BerriAI LiteLLM SQL Injection Vulnerability

Added to KEV2026-05-08

Federal patch deadline2026-05-11

Known ransomware useUnknown

Affected product

BerriAI LiteLLM

Remediation Steps

Identify all systems running the affected software version
Test patches in isolated lab environment before production deployment
Deploy patches to production systems during change windows
Verify patch installation across all affected systems
Monitor system logs for exploitation attempts

References

Referenced in our briefings & reports

Vulnerability Priority Report – Week 2 of May 2026 (May 11 – 17)
GitHub, Hugging Face RCE; VECT 2.0 ransomware; BlueNoroff deepfakes (2026-04-29)

Related vulnerabilities

CVE-2026-59822 – BerriAI LiteLLM (same product)
CVE-2026-42271 – BerriAI LiteLLM (same product)
CVE-2026-114625 – Arista VeloCloud Orchestrator (same weakness: CWE-89)
CVE-2026-75682 – Adobe Connect (same weakness: CWE-89)
CVE-2026-76461 – Cisco Secure Email Gateway (same weakness: CWE-89)
CVE-2026-74820 (same weakness: CWE-89)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.