Dashboard / CVE-2026-42208

CVE-2026-42208

CRITICAL CISA KEV
ACT NOW Priority: 8.32 BB Relevance: 89/100
Published: 2026-05-08 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: X
AT: None
VC: High
VI: High
VA: High

Description

BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized access to the proxy and the credentials it manages.

CISA Known Exploited Vulnerability

Vendor / Product BerriAI — LiteLLM
Date Added 2026-05-08
Remediation Due 2026-05-11
https://github.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmc ; https://nvd.nist.gov/vuln/detail/CVE-2026-42208

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
litellm litellm 1.81.16 – 1.83.7

References & Advisories (6)

https://bugzilla.redhat.com/show_bug.cgi?id=2463965
Mitigation Third Party Advisory

Bug Bounty Relevance

89 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

9.3 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

89.42%
Raw Score 0.894200
Percentile 99.8%
Date 2026-10-28

Intelligence Sources

kev ref →
nvd ref →

External Links