Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2026-42208 [Critical] [Actively exploited]

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-42208.

CVSS: 9.8
Exploit Status: Actively exploited
Coverage Span: 2026-05-06
Reports: 1 related reports

Associated Reports & Timeline

CVE-2026-42208: Pre-Authentication SQL Injection in LiteLLM Proxy

CVE-2026-42208 is a pre-auth SQL injection in LiteLLM proxy 1.81.16–1.83.6: a missing bind lets attackers run SQL on any LLM route, confirmed via pg_sleep timing; exploitation hit ~36 hours later.