Critical LiteLLM SQL Injection Exploited to Target Stored API Keys and Credentials
Active Exploitation · 13 sources · Updated 4mo ago · First seen Apr 27, 2026
Attackers began exploiting CVE-2026-42208 in LiteLLM shortly after public disclosure, using a pre-authentication SQL injection flaw in the product’s Authorization: Bearer verification path to query the backend PostgreSQL database without logging in. The vulnerability, also tracked as GHSA-r75f-5x8p-qvmc, affects LiteLLM versions 1.81.16 through 1.83.6 and was fixed in v1.83.7 after the project replaced vulnerable string interpolation with a parameterized query.
Sysdig said the first observed exploitation attempt arrived 36 hours and seven minutes after the advisory was indexed, with activity focused on enumerating high-value tables holding virtual API keys, provider credentials, verification tokens, and environment-based configuration. Researchers described the intrusion attempts as targeted rather than opportunistic, citing knowledge of Prisma-generated PostgreSQL table names and UNION-based column discovery; while no confirmed follow-on abuse was observed, defenders are being urged to patch exposed instances immediately, rotate all stored secrets, and review logs and billing accounts for signs of compromise.
