Changes.Watch~ upgrade verdicts ~
Free digest
CriticalPHP2Shell: is your PHP patched?

critical vulnerability

LiteLLM has SQL Injection in Proxy API key verification

Exploited · CISA KEVFix availableCritical · CVSS 9.3EPSS 5.8%

Published Apr 24, 2026 · updated Oct 5, 2026 · added to CISA KEV May 8, 2026

What to do

  1. Upgrade to a fixed version: litellm 1.83.7.
  2. This is exploited in the wild: treat it as urgent (CISA's federal deadline is May 11, 2026).
  3. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

PyPIlitellm22,778,449 downloads/week

Vulnerable versions
>= 1.81.16, < 1.83.7
Fixed in
1.83.7

Check your project: pip show litellm

What changed

  1. May 8, 2026

    Added to CISA KEV on 2026-05-08: exploitation in the wild confirmed; federal remediation due 2026-05-11.

Sources

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

← All critical vulnerabilities