CVE-2026-12797

Name of the Vulnerable Software and Affected Versions BerriAI litellm versions prior to 1.82.6

Description An authorization bypass exists in the Completions Interface. The issue occurs within the async pre call hook() function located in the enterprise/enterprise hooks/banned keywords.py file. Remote attackers can manipulate the prompt argument to achieve incorrect authorization.

Recommendations Update to version 1.82.6 or later. As a temporary workaround, restrict access to the async pre call hook() function in the enterprise/enterprise hooks/banned keywords.py file.