Critical SQL Injection Vulnerability Discovered in BerriAI LiteLLM

What changed

BerriAI LiteLLM, a proxy server designed for interfacing with LLM APIs, has been found to contain a critical SQL injection vulnerability. This flaw exists in versions 1.81.16 to before 1.83.7, where a database query improperly integrates user-supplied API keys directly into the query text.

As a result, an unauthenticated attacker can exploit this vulnerability by sending a specially crafted Authorization header to any LLM API route, potentially gaining unauthorized access to the proxy's database.

Who is affected

The vulnerability affects various users and systems that utilize BerriAI LiteLLM for API interactions. Organizations using this software should be particularly vigilant.

The following groups are at risk due to this vulnerability:

• Organizations employing BerriAI LiteLLM versions between 1.81.16 and 1.83.6.
• Developers integrating LLM APIs through BerriAI LiteLLM.
• Any entity relying on the proxy for managing API keys and credentials.

What to do

Users of BerriAI LiteLLM are strongly advised to upgrade to version 1.83.7 or later to mitigate this vulnerability. Regular updates and security patches are essential to protect sensitive data.

Additionally, organizations should conduct a thorough review of their database access controls and monitor for any unauthorized access attempts.

• Upgrade to BerriAI LiteLLM version 1.83.7 or later immediately.
• Implement stringent access controls and monitoring for database operations.
• Educate development teams about secure coding practices to prevent similar vulnerabilities.