CVE-2025-45809

5.4 mediumEPSS 0.3%

SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2025-07-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

litellm:litellm

References

https://github.com/shadia0/Patienc/blob/main/litellm/SQL_injection.md
https://huntr.com/bounties/3e6e4d40-b06a-4f54-a3ed-cc93584b12f3

Check your stack JSON