AI and data stack advisories

Severe, 6 weeks1490Projects326

1490 severe, 6 weeks · 326 projects

LiteLLMGHSA-p897-vf7j-f5h8

LiteLLM: improper authorization

LiteLLM

CVE-2026-12797 · Published Jun 21, 2026 · updated Oct 1, 2026

Low6.3
No fix yet
GitHub advisory

A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function async_pre_call_hook of the file enterprise/enterprise_hooks/banned_keywords.py of the component Completions Interface. The manipulation of the argument prompt results in incorrect authorization. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.

Affected versions

PackageAffectedFixed in
litellm
PyPI
<= 1.82.5No fix yet
Details and references

More LiteLLM advisories

All LiteLLM