PT-2026-51182

CVE-2026-12770

Published

2026-06-21

Updated

2026-10-01

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions litellm versions prior to 1.63.2

Description An improper authorization issue exists in the Admin Key Handler component within the file litellm/proxy/management endpoints/key management endpoints.py. This flaw allows a remote attacker to bypass authorization requirements through an unknown function.

Recommendations Apply patch 23781 to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Eric-C

Vendors

Affected products

Weakness enumeration

CWE-266: Incorrect Privilege Assignment

CWE-285: Improper Authorization