GHSA-h6m6-jj8v-94jj: SQL injection in litellm

Summary

An SQL injection flaw exists in the berriai/litellm repository, in the `/global/spend/logs` endpoint. The affected code builds an SQL query by concatenating an unvalidated `api_key` parameter directly into it, so malicious data in that parameter can alter the query. The source says it affects the latest version of the repository and that exploitation could lead to unauthorized access, data manipulation, exposure of confidential information, and denial of service.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• litellmPyPILLM dependency since 2023-07-27 · 54 tracked dependents

Related items

• LowAnthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection FlawsSimilar attack · The Hacker News
• CriticalCVE-2026-108263: Astron Agent code-node execution as root through workflow run endpointsSimilar attack · NVD/CVE Database
• MediumHackers abuse Google Ads, Bing redirects to push Claude ClickFix attacksSimilar attack · BleepingComputer
• CriticalHermes Agent - PKCE Session Takeover via Redirect-URI Parser ConfusionSimilar attack · Tenable Research Advisories
• LowSocial Engineering AI Agents: The New BEC for 2026Similar attack · Dark Reading