PT-2026-51211 · Berriai · Litellm

Eric-C · Published 2026-06-21 · Updated 2026-06-21 · CVE-2026-12797

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BerriAI litellm versions prior to 1.82.6

Description An authorization bypass exists in the Completions Interface. The issue occurs within the async pre call hook() function located in the enterprise/enterprise hooks/banned keywords.py file. Remote attackers can manipulate the prompt argument to achieve incorrect authorization.

Recommendations Update to version 1.82.6 or later. As a temporary workaround, restrict access to the async pre call hook() function in the enterprise/enterprise hooks/banned keywords.py file.

Exploit

Fix

Incorrect Authorization

Improper Authorization

Weakness Enumeration

CWE-863

CWE-285

Related Identifiers

CVE-2026-12797

Affected Products

Litellm

References · 7

• 🔥 https://gist.github.com/YLChen-007/078179224f07cc4e39e4f141a18c817a · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-12797 · Security Note
• https://vuldb.com/vuln/372559/cti · Note
• https://vuldb.com/cve/CVE-2026-12797 · Note
• https://vuldb.com/submit/811288 · Note
• https://vuldb.com/vuln/372559 · Note
• https://twitter.com/VulmonFeeds/status/2068651934278418459 · Twitter Post