5.3
Medium
CVE-2026-12770 A vulnerability was determined in BerriAI litellm up to 1.63.1
Description
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/management_endpoints/key_management_endpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 23781. It is recommended to apply a patch to fix this issue. The vendor was contacted early about this disclosure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| litellm 1.63 | 1.63.0 → 1.63.1 | No fix stated |
References
- VDB-372512 | BerriAI litellm Admin Key key_management_endpoints.py improper authorization vuldb.com
- VDB-372512 | CTI Indicators (IOB, IOC, TTP, IOA) vuldb.com
- CVE-2026-12770 | CVE Analysis and Report vuldb.com
- Submit #811279 | litellm <= 1.63.1 Improper Authorization (CWE-285) vuldb.com
- gist.github.com gist.github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of litellm
The 40 CVEs of litellm →
CVE-2026-114612
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
9.9
Critical
CVE-2026-108575
A vulnerability has been found in BerriAI LiteLLM up to 1.94.0
5.3
Medium
CVE-2026-108574
A flaw has been found in BerriAI LiteLLM up to 1.95.0
5.3
Medium
CVE-2026-93355
LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured…
7.6
High