CriticalFix available
LiteLLM has SQL Injection in Proxy API key verification
Impact A database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could send a specially crafte…
Products: litellmCVEs: CVE-2026-42208