LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could send a specially crafted Authorization header to any LLM API route (for example POST /chat/completions) and reach this query through the proxy's error-handling path. An attacker could read data from the proxy's database and may be able to modify it, leading to unauthorised access to the proxy and the credentials it manages. This issue has been patched in version 1.83.7.

According to its self-reported version, the instance of LiteLLM running on the remote web server is prior to 1.83.7. It is, therefore, affected by multiple vulnerabilities :

- An SQL Injection in the Proxy API Key verification flow.

- An Authenticated command execution via MCP stdio test endpoints

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16
    to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key
    value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could
    send a specially crafted Authorization header to any LLM API route (for example POST /chat/completions)
    and reach this query through the proxy's error-handling path. An attacker could read data from the proxy's
    database and may be able to modify it, leading to unauthorised access to the proxy and the credentials it
    manages. This issue has been patched in version 1.83.7. (CVE-2026-42208)

ID	Name	Product	Family	Type	Severity
115229	LiteLLM < 1.83.7 Multiples Vulnerabilities	Web App Scanning	Artificial Intelligence	Version Based	critical
440809	SCA: security update for litellm (GHSA-r75f-5x8p-qvmc)	Tenable Cloud Security	SCA Checks	Local	critical
440809	SCA: security update for litellm (GHSA-r75f-5x8p-qvmc)	Tenable Self-Hosted Container Security	SCA Checks	Local	critical

Detections

Analytics

CVE-2026-42208

critical

Tenable Plugins

critical

critical

critical