LiteLLM: Admin Key Handler Has Improper Authorization
LiteLLM
More for LiteLLM RSS feed for LiteLLM
- Severity
- High, CVSS 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-12770
- Affects
- LiteLLM
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- June 21, 2026
- Source last modified
- October 25, 2026
Description
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/management_endpoints/key_management_endpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 23781. It is recommended to apply a patch to fix this issue. The vendor was contacted early about this disclosure.
Description quoted from the NVD record.
Who is affected
LiteLLM, made by BerriAI, is a tool that sits between your organization's apps and AI language model services and passes requests between them. This flaw affects LiteLLM versions through 1.63.1. The problem is in the part that handles admin keys, which does not properly check whether someone is allowed to do what they are asking. An attacker could take advantage of this over a network, without needing to be at the machine running LiteLLM. This flaw is rated High. If your organization uses LiteLLM at any of these versions, it is affected.
What to do
- If someone on your staff or a volunteer installed LiteLLM, ask them to check which version your organization runs. Any version through 1.63.1 is affected.
- No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release. The person who runs LiteLLM should apply the patch for this flaw, listed as patch 23781, as soon as possible.
- If an IT provider or vendor runs LiteLLM for your organization, send them this advisory and ask when the update will be done.
Analysis written from the source record as of October 25, 2026 and reviewed before publishing.