CVE-2025-0330

Name of the Vulnerable Software and Affected Versions berriai/litellm version 1.52.1

Description An issue in the proxy server.py file causes the leakage of Langfuse API keys when an error occurs while parsing team settings. This exposes sensitive information, including langfuse secret and langfuse public key, potentially granting full access to the Langfuse project and all its stored requests.

Recommendations berriai/litellm version 1.52.1: At the moment, there is no information about a newer version that contains a fix for this vulnerability.