Advisoriesby IbisLiteLLMGHSA-6qr3-3g89-m4jj
LiteLLM: Admin Key Handler Has Improper Authorization
No fix yet
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/management_endpoints/key_management_endpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| litellm PyPI | <= 1.63.1 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-266
- Also known as
- CVE-2026-12770, PYSEC-2026-4068
More LiteLLM advisories
All LiteLLM
BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec LoaderCVE-2026-12798no fix yetBerriAI litellm: UI User Enumeration leads to System-Wide Information DisclosureCVE-2026-12799no fix yetLiteLLM: improper authorizationCVE-2026-12797no fix yetBerriAI litellm: SSO Login Does Not Invalidate Previous UI Session TokensCVE-2026-12796no fix yetLiteLLM: SSO Debug Flow Has Improper AuthenticationCVE-2026-12795no fix yetLiteLLM: MCP Proxy Has Improper AuthenticationCVE-2026-12773fixed in 1.84.0