Skip to content
OpenAdvisories

Vendor

Helicone

3 known vulnerabilities.

Products

helicone 2 ai-gateway 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-85178

    Helicone Cross-Tenant Provider Key Disclosure via Missing Organization Filter

    Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails to validate the requester's organization against the vault key's organization identifier. Attackers with admin or owner privileges in any or…

    Helicone helicone