RaqibCTI
CVE

CVE-2026-42208

P2
BerriAI LiteLLM SQL Injection Vulnerability
BerriAI · LiteLLM
Date added (CISA)
2026-05-08
Remediation due
2026-05-11
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized access to the proxy and the credentials it manages.

Source: NVD ↗ · CISA KEV Catalog ↗