VulnWatch VulnWatch
← Back to dashboard
Unknown rss_thehackernews · rss_224f620bcb737f36b1a64ab26727c5a9

LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure

Published Apr 29, 2026

In yet another instance of threat actors quickly jumping on the exploitation bandwagon, a newly disclosed critical security flaw in BerriAI's LiteLLM Python package has come under active exploitation in the wild within 36 hours of the bug becoming public knowledge. The vulnerability, tracked as CVE-2026-42208 (CVSS score: 9.3), is an SQL injection that could be exploited to modify the underlying

Affected AI Products

litellm
Get the weekly digest. Every Monday: top AI security stories of the week. Free.