Llm-Proxy

LiteLLM Proxy Pre-Authentication SQL Injection via Error-Handling Callback (CVE-2026-42208) new KEV EPSS 89%CVE-2026-42208webCRITICAL 9.8Patched2026-07-11LiteLLM Proxy Unauthenticated Auth Bypass via Host-Header Route Confusion (CVE-2026-49468) newCVE-2026-49468webCRITICAL 9.8Patched2026-07-05LiteLLM Proxy Privilege Escalation via `/user/update` (CVE-2026-47102) newCVE-2026-47102webHIGH 8.8Patched2026-07-05LiteLLM Guardrail Custom-Code Sandbox Escape to Root RCE (CVE-2026-40217) new EPSS 15%CVE-2026-40217webCRITICAL 8.8Patched2026-07-05