SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endp...
Date: 2025-07
Affected: litellm/litellm
Attack vector: sql-injection
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2025-45809
CWE: CWE-89
CVSS: 5.4 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)

SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints.


Mitigations:

Architectural layers (MAESTRO):