← Database

CVE-2025-45809

MEDIUM CVSS: 5.4 Published: 2025-07-03 Modified: 2026-06-17

Description

SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints.

Affected Platforms

Litellm Litellm

Weakness Type

CWE-89

References