Skip to content
Threat Feed
Subscribe

Vendor

LiteLLM

3 briefs RSS
high advisory

LiteLLM Multiple Vulnerabilities Allow Privilege Escalation

A remote, authenticated attacker can exploit multiple vulnerabilities in LiteLLM to escalate their privileges.

LiteLLM privilege-escalation vulnerability
2r 1t
medium advisory

LiteLLM SQL Injection Vulnerability (CVE-2025-45809)

A SQL Injection vulnerability (CVE-2025-45809) in LiteLLM versions prior to 1.81.0 allows unauthenticated attackers to potentially steal database contents and read server files via time-based blind SQL injection in the `/key/block` and `/key/unblock` endpoints.

LiteLLM sqli sql-injection CVE-2025-45809
2r 1t 1i
critical threat

LiteLLM Multiple Vulnerabilities

Multiple vulnerabilities in LiteLLM could allow an attacker to perform a SQL injection attack and gain unauthorized access or execute arbitrary code with the privileges of the service.

LiteLLM sql-injection vulnerability privilege-escalation
2r 2t