Log in Start free

Vulnerability · Published Jun 21, 2026 · Assigned by VulDB

CVE-2026-12770BerriAI litellm Admin Key key_management_endpoints.py improper authorization

Medium 5.4

In plain English

A medium-severity security flaw in litellm from BerriAI. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).

Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.6%top 52.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/management_endpoints/key_management_endpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 23781. It is recommended to apply a patch to fix this issue. The vendor was contacted early about this disclosure.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
PyPIlitellmno fix listedGHSA-6qr3-3g89-m4jj
PyPIlitellmno fix listedPYSEC-2026-4068

Affected products (as reported)

VendorProductVersions
BerriAI litellm 1.63.01.63.1

Weakness: CWE-285, CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:O/RC:C

References