Known Exploited Vulnerabilities May 08, 2026 · CISA KEV Catalog

CVE-2026-42208: Berri AI LiteLLM SQL Injection Vulnerability

BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized access to the proxy and the credentials it manages.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: BerriAI CVE-2026-42208
Related: CVE-2026-59822: Berri AI LiteLLM Improper Authentication Vulnerability Known Exploited Vulnerabilities · Sep 02, 2026
CVE-2026-42271: Berri AI LiteLLM Command Injection Vulnerability Known Exploited Vulnerabilities · Jun 08, 2026
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026