{"data":{"id":"4e7b8ba3-978d-4866-b04f-dc716f6e17cd","title":"GHSA-r75f-5x8p-qvmc: LiteLLM has SQL Injection in Proxy API key verification","summary":"LiteLLM's proxy API key verification mixed the caller-supplied key value into a database query instead of passing it as a separate parameter, enabling SQL injection. An unauthenticated attacker can send a crafted Authorization header to any LLM API route, such as POST /chat/completions, and reach the query through the proxy's error-handling path. The attacker can read proxy database data and may modify it, gaining unauthorised access to the proxy and the credentials it manages.","solution":"Fixed in 1.83.7. The caller-supplied value is now always passed to the database as a separate parameter. Upgrade to 1.83.7 or later. If upgrading is not immediately possible, set disable_error_logs: true under general_settings, which removes the path through which unauthenticated input reaches the vulnerable query.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-r75f-5x8p-qvmc","publishedAt":"2026-04-24T16:17:07.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["litellm@>= 1.81.16, < 1.83.7 (fixed: 1.83.7)"],"affectedPackageNames":["litellm"],"affectedPackageRefs":["pypi:litellm"],"affectedVendors":[],"affectedVendorsRaw":["LiteLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-r75f-5x8p-qvmc"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-24T16:17:07.000Z","fixReleasedAt":"2026-04-13T17:34:58.360Z","daysToFix":-11,"fixCheckedAt":"2026-10-29T21:37:22.755Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"litellm","fixedVersion":"1.83.7","matchedVersion":"1.83.7","fixReleasedAt":"2026-04-13T17:34:58.360Z","daysToFix":-11,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:22.609Z"}]}}