{"action":"Upgrade litellm to 1.83.7 or later.","affected":[{"fixed":"1.83.7","introduced":"1.81.16"}],"component":"litellm","cve_ids":["CVE-2026-42208"],"ecosystem":"PyPI","epss":0.8942,"exploited":true,"fixed_versions":["1.83.7"],"ghsa_id":"GHSA-r75f-5x8p-qvmc","id":"tcs_01M5KFXECFDRKMWE3WWVD9TN28","modified_at":"2026-10-05T18:45:06.017895472Z","published_at":"2026-04-24T16:17:07Z","references":["https://osv.dev/vulnerability/GHSA-r75f-5x8p-qvmc","https://github.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmc","https://nvd.nist.gov/vuln/detail/CVE-2026-42208","https://access.redhat.com/security/cve/CVE-2026-42208","https://bugzilla.redhat.com/show_bug.cgi?id=2463965","https://github.com/BerriAI/litellm","https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable","https://github.com/advisories/GHSA-r75f-5x8p-qvmc","https://github.com/pypa/advisory-database/tree/main/vulns/litellm/PYSEC-2026-391.yaml","https://pypi.org/project/litellm","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42208"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-r75f-5x8p-qvmc","url":"https://osv.dev/vulnerability/GHSA-r75f-5x8p-qvmc"},{"source":"kev","source_id":"CVE-2026-42208","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":"LiteLLM has SQL Injection in Proxy API key verification"}