{"data":{"id":"4aa4b69f-c572-4a35-9559-c435845176b7","title":"CVE-2026-42208: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before…","summary":"LiteLLM, a proxy server (AI Gateway) for calling LLM APIs, is affected by CVE-2026-42208 in versions 1.81.16 through before 1.83.7. During proxy API key checks, a database query mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker can send a crafted Authorization header to any LLM API route, such as POST /chat/completions, and reach the query through the error-handling path, potentially reading or modifying proxy database data and gaining unauthorised access to managed credentials.","solution":"Fixed in 1.83.7.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-42208","publishedAt":"2026-05-08T04:16:19.923Z","cveId":"CVE-2026-42208","cweIds":["CWE-89"],"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["supply_chain","other"],"issueType":"vulnerability","affectedPackages":["litellm@>= 1.81.16, < 1.83.7 (fixed: 1.83.7)"],"affectedPackageNames":["litellm"],"affectedPackageRefs":["pypi:litellm"],"affectedVendors":[],"affectedVendorsRaw":["LiteLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"active","epssScore":0.8942,"epssCheckedAt":"2026-11-10T12:15:57.619Z","kevDateAdded":"2026-05-08","advisoryAliases":["GHSA-r75f-5x8p-qvmc"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:47.495Z","patchAvailable":true,"disclosureDate":"2026-05-08T04:16:19.923Z","fixReleasedAt":"2026-04-13T17:34:58.360Z","daysToFix":-25,"fixCheckedAt":"2026-10-29T21:36:41.642Z","capecIds":["CAPEC-66"],"crossRefCount":1,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"litellm","fixedVersion":"1.83.7","matchedVersion":"1.83.7","fixReleasedAt":"2026-04-13T17:34:58.360Z","daysToFix":-25,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:41.496Z"}]}}