CVE-2025-11203: LiteLLM Information health API_KEY Information Disclosure Vulnerability
LiteLLM Information health APIKEY Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LiteLLM. Authentication is required to exploit this vulnerability.
The specific flaw exists within the handling of the APIKEY parameter provided to the health endpoint. The issue results from exposing sensitive information to an unauthorized actor. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-26585.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11203?
CVE-2025-11203 is classified as a moderate severity vulnerability that allows information disclosure.
How does CVE-2025-11203 impact LiteLLM installations?
CVE-2025-11203 can lead to the exposure of sensitive information on affected LiteLLM installations.
What is required to exploit CVE-2025-11203?
Authentication is required to exploit CVE-2025-11203.
How do I fix CVE-2025-11203?
To fix CVE-2025-11203, update to the latest version of LiteLLM where the vulnerability is patched.
What versions of LiteLLM are affected by CVE-2025-11203?
CVE-2025-11203 affects certain installations of LiteLLM Information health but specific versions are not detailed.