Vulnerabilities4 min read
LiteLLM SQL Injection Exploited 36 Hours After Disclosure
CVE-2026-42208 lets attackers steal API keys and forge admin sessions in LiteLLM without authentication. Exploitation began within 36 hours of public disclosure.
Marcus ChenApr 29, 2026