CVE-2026-42208: CRITICAL (CVSS 9.8), Actively Exploited (CISA KEV)

CRITICAL (CVSS 9.8), Actively Exploited (CISA KEV), EPSS 84.5%. LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthentic