Research · May 7, 2026 · ZeroDay Catalog
Critical SQL Injection Vulnerability in BerriAI LiteLLM
A significant SQL injection vulnerability has been identified in BerriAI LiteLLM, affecting versions prior to 1.83.7, allowing potential unauthorized access to sensitive data.
What changed
A SQL injection vulnerability has been discovered in BerriAI LiteLLM, a proxy server designed for interfacing with LLM APIs. This flaw exists in versions from 1.81.16 up to, but not including, 1.83.7.
The vulnerability arises from the improper handling of user-supplied API keys within database queries, which could allow attackers to manipulate the database through crafted requests.
Who is affected
Organizations utilizing BerriAI LiteLLM versions 1.81.16 to 1.83.6 are at risk, particularly those employing this tool for AI API interactions.
The vulnerability could expose sensitive data managed by the proxy, impacting any applications relying on LiteLLM for API key management.
- BerriAI LiteLLM users
- Developers integrating LLM APIs
- Organizations managing sensitive data through LiteLLM
What to do
It is crucial for affected users to upgrade to version 1.83.7 or later immediately to mitigate the risk posed by this vulnerability.
Review and monitor database access logs for any unauthorized access attempts and ensure that API keys are managed securely.
- Upgrade to BerriAI LiteLLM version 1.83.7 or higher.
- Implement additional security measures for API key management.
- Conduct a security audit of database access patterns.