Critical LiteLLM SQL Flaw Under Active Exploitation

A significant SQL injection vulnerability, identified as CVE-2026-42208, has been discovered in the LiteLLM Python package and is currently being actively exploited. This flaw allows unauthorized modification of the proxy database, potentially enabling attackers to steal sensitive API keys and credentials. While a patch was released on April 19, 2026, exploitation attempts were observed shortly after the advisory became public.