{
 "id": "AIR-2024-0136",
 "slug": "cve-2024-4890-sql-injection-vulnerability-in-litellm",
 "title": "CVE-2024-4890: SQL Injection Vulnerability in LiteLLM",
 "summary": "A blind SQL injection vulnerability exists in LiteLLM due to improper parameter handling in user deletion queries. Exploitation can grant attackers unauthorized access to sensitive database information including API keys and tokens.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "LiteLLM"
 ],
 "incident_date": "2024-06-06",
 "incident_date_precision": "day",
 "first_reported": "2024-06-06",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-8j42-pcfm-3467",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2024-4890: SQL injection in litellm",
   "published_at": "2024-06-06"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2024-4890",
  "sql-injection",
  "litellm"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T07:00:14.101Z"
}