PT-2026-51182 · Berriai · Litellm

Eric-C · Published 2026-06-21 · Updated 2026-06-21 · CVE-2026-12770

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions litellm versions prior to 1.63.2

Description An improper authorization issue exists in the Admin Key Handler component within the file litellm/proxy/management endpoints/key management endpoints.py. This flaw allows a remote attacker to bypass authorization requirements through an unknown function.

Recommendations Apply patch 23781 to resolve the issue.

Exploit

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2026-12770

Affected Products

Litellm

References · 9

• 🔥 https://gist.github.com/YLChen-007/993c68152b2c770d53590f1684c755d4 · Exploit
• https://github.com/BerriAI/litellm/pull/23781 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-12770 · Security Note
• https://vuldb.com/vuln/372512/cti · Note
• https://vuldb.com/submit/811279 · Note
• https://vuldb.com/cve/CVE-2026-12770 · Note
• https://vuldb.com/vuln/372512 · Note
• https://twitter.com/VulmonFeeds/status/2068508504650928284 · Twitter Post
• https://github.com/BerriAI/litellm · Note