CVE-2025-45809

SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints.

Affected products

Berriai/Litellm

Litellm

= 1.65.4

CVSS 3.1

5.4 MEDIUM

EPSS

0.3% (17th percentile)

Weakness

CWE-89

NVD status

Modified

Published

2025-07-03