Medium severity5.4NVD Advisory· Published Jul 3, 2025· Updated Jun 17, 2026

CVE-2025-45809

Description

SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/key/block" and "/key/unblock" API endpoints.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Berriai/Litellm3 versions
cpe:2.3:a:litellm:litellm:1.65.4:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:litellm:litellm:1.65.4:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <1.81.0

Patches

Vulnerability mechanics

References

github.com/shadia0/Patienc/blob/main/litellm/SQL_injection.mdnvdExploitMitigationThird Party Advisory
huntr.com/bounties/3e6e4d40-b06a-4f54-a3ed-cc93584b12f3nvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000