BerriAI LiteLLM SQL Injection Vulnerability

KEV-CVE-2026-42208 · CVE-2026-42208 · 갱신 2026. 5. 8.

해야 할 일

실제 공격에 쓰이고 있습니다. 제조사 권고를 확인하고 바로 패치하거나 노출을 막으세요.

원문

BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized access to the proxy and the credentials it manages.

Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Due date: 2026-05-11 Known ransomware use: Unknown

출처

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-42208
WEBhttps://github.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmc
WEBhttps://nvd.nist.gov/vuln/detail/CVE-2026-42208

오늘 목록으로

BerriAI LiteLLM SQL Injection Vulnerability (KEV-CVE-2026-42208) · Sieve