CVE-2026-42208: Targeted SQL injection against LiteLLM’s authentication path discovered 36 hours following vulnerability disclosure

Keypoints

• Critical pre-auth SQL injection (CVE-2026-42208 / GHSA-r75f-5x8p-qvmc) in LiteLLM allowed arbitrary SELECTs against the PostgreSQL backend by concatenating the Authorization: Bearer value into a query without parameterization.
• The advisory was indexed in the GitHub Advisory Database on 2026-04-24 and the first observed exploitation attempt occurred 36 hours and seven minutes later (2026-04-26 04:24 UTC).
• Sysdig TRT captured precise, non-generic UNION-based schema enumeration targeting three high-value tables: LiteLLM_VerificationToken, litellm_credentials, and litellm_config (environment_variables).
• The operator demonstrated schema knowledge (Prisma PascalCase table names) and ran textbook column-count discovery, implying prior access to the schema or deliberate reconnaissance/LLM assistance.
• Exploitable instances expose cloud-grade provider keys and master/virtual API keys; successful extraction would allow unauthenticated reuse (replay to /chat/completions) and large blast radius across upstream accounts.
• Recommended mitigations: update to v1.83.7, rotate all keys and provider credentials for internet-reachable instances, restrict proxies behind authenticated reverse proxies, and monitor logs for the distinctive request signatures.