Description
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/management_endpoints/key_management_endpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 23781. It is recommended to apply a patch to fix this issue. The vendor was contacted early about this disclosure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BerriAI | litellm | 1.63.0, 1.63.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | litellm | <= 1.63.1 | — | GHSA-6qr3-3g89-m4jj |
References
- VDB-372512 | BerriAI litellm Admin Key key_management_endpoints.py improper authorization vdb-entry
- VDB-372512 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-12770 | CVE Analysis and Report third-party-advisory
- Submit #811279 | litellm <= 1.63.1 Improper Authorization (CWE-285) third-party-advisory
- https://gist.github.com/YLChen-007/993c68152b2c770d53590f1684c755d4 exploit
- https://github.com/BerriAI/litellm/pull/23781 issue-tracking patch
- https://github.com/BerriAI/litellm/ product