CVE-2026-12770: BerriAI litellm Admin Key key_management_endpoints.py improper authorization
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/managementendpoints/keymanagementendpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 23781. It is recommended to apply a patch to fix this issue. The vendor was contacted early about this disclosure.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-12770?
The severity of CVE-2026-12770 is rated medium with a score of 5.4.
How does CVE-2026-12770 affect BerriAI litellm?
CVE-2026-12770 affects BerriAI litellm by causing improper authorization in the Admin Key Handler component.
What type of vulnerability is CVE-2026-12770?
CVE-2026-12770 is an improper authorization vulnerability found in the key_management_endpoints.py file.
What component is impacted by CVE-2026-12770?
CVE-2026-12770 impacts the Admin Key Handler component in BerriAI litellm.
How can I mitigate the effects of CVE-2026-12770?
Mitigation for CVE-2026-12770 typically involves updating to the latest version of the affected software, ensuring proper authorization mechanisms are in place.