CVE-2025-45809

MEDIUM 5.4CVE-2025-45809 · Published 03/07/2025 · updated 17/06/2026

In short

CVE-2025-45809 is a MEDIUM (CVSS 5.4) vulnerability affecting litellm (litellm).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 21.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
litellm litellm	`= 1.65.4`	No fix yet

Description

SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints.

References

shadia0/Patienc · Exploit
huntr.com/bounties/3e6e4d40-b06a-4f54-a3ed-cc93584b12f3

More vulnerabilities in litellm

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

litellm

= 1.65.4

No fix yet

More vulnerabilities in litellm

See all →