CVE-2026-42208 — LiteLLM — Fixed in 1.83.7

Critical9.8 Published on May 8, 2026

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could send a specially crafted Authorization header to any LLM API route (for example POST /chat/completions) and reach this query through the proxy's error-handling path. An attacker could read data from the proxy's database and may be able to modify it, leading to unauthorised access to the proxy and the credentials it manages. This issue has been patched in version 1.83.7.

Fixed versions

Choose the version for your installed product and release branch.

Product	Fixed versions
LiteLLM	1.83.7

Versions stated in the NVD description

Actively exploited

In the CISA exploited-vulnerabilities catalogue since May 8, 2026
US federal agencies must remediate it by May 11, 2026 (BOD 22-01)
Attacked 11 days before the vulnerability was made public

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Source: CISA KEV · Aug 27, 2026 Jul 23, 2026 May 8, 2026 Apr 27, 2026

CVSS score9.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-89, CWE-89

Vendorslitellm