CVE-2026-42208

GitHubCurated repository PoCScannerC++SecureWithUmer/CVE-2026-PoCs

PoC files

2 files

File viewing is interactive and short-lived. Downloads are password-protected ZIP archives using password eip.

GitHub
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

A Python script that probes a target URL for accessible LiteLLM endpoints and attempts basic SQL injection payloads on public endpoints to detect potential CVE-2026-42208 exposure. It does not exploit the vulnerability to read or modify data.

Backdoor review

No backdoor observed in reviewed code

The supplied PoC is a Python script that scans a target URL for LiteLLM endpoints and tests for SQL injection using hardcoded payloads. It performs only the advertised vulnerability scanning behavior: sending HTTP GET requests to known LiteLLM paths and appending SQLi payloads to query parameters. No backdoor, deceptive payload, persistence, credential theft, or unrelated remote access behavior is present in the reviewed evidence.

ClassificationScanner
Model confidence98%
AuthenticationNot required
Languagespython
Target softwareBerriAI LiteLLM
Attack typessql injection
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The script is explicitly described as a 'Vulnerability Scanner' in its banner and docstring. It probes endpoints and sends SQLi payloads to detect potential vulnerability, but does not extract, exfiltrate, or modify data. It only reports findings, which is characteristic of a scanner.

ridhinva-litellm-scanner-1c26469/litellm_scanner.py:3-5ridhinva-litellm-scanner-1c26469/litellm_scanner.py:11-14

Requirements

  • Target URL or file containing target URLs must be supplied as a command-line argument.ridhinva-litellm-scanner-1c26469/litellm_scanner.py:72-82

Observed behavior

  • Iterates over a list of known LiteLLM endpoints and sends HTTP GET requests to each.ridhinva-litellm-scanner-1c26469/litellm_scanner.py:45-49
  • Checks response body for 'litellm' or 'model' strings to confirm a LiteLLM instance.ridhinva-litellm-scanner-1c26469/litellm_scanner.py:52-53
  • On public endpoints, sends GET requests with SQL injection payloads appended as query parameters and compares response length to flag possible injection.ridhinva-litellm-scanner-1c26469/litellm_scanner.py:56-62
  • Prints findings to stdout, including discovered endpoints, LiteLLM confirmation, and possible SQL injection indicators.ridhinva-litellm-scanner-1c26469/litellm_scanner.py:87-90
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Url
https://github.com/SecureWithUmer/CVE-2026-PoCsSource repository hosting the PoC; no malicious content observed in the script.ridhinva-litellm-scanner-1c26469/litellm_scanner.py:1-96
Review boundaries

What the analysis did not establish

  • Only one text file (litellm_scanner.py) is included; the artifact directory contains an additional unclassified file (1076 bytes) that is not analyzed.
  • The scanner uses a limited set of SQLi payloads and a simple response-length heuristic, which may produce false positives or false negatives.
  • The evidence does not include any output or execution results, so the scanner's effectiveness cannot be verified.
  • Only the supplied text file (litellm_scanner.py) was reviewed; no other files from the repository unit were provided or analyzed.
  • The script's behavior depends on the target server's response; the review does not assess the safety or correctness of the scanning activity itself.
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

Linked vulnerabilities

1