CVE-2025-11203

Vulnerability

Overview

CVE-2025-11203 is an information disclosure vulnerability in LiteLLM, affecting the health endpoint's handling of the API_KEY parameter. The flaw arises because the endpoint exposes sensitive information to an unauthorized actor, specifically the API_KEY value, which can lead to the disclosure of stored credentials [1].

Exploitation

An attacker with valid authentication can exploit this vulnerability remotely by sending a crafted request to the health endpoint. The attack requires low privileges and user interaction, as reflected in the CVSS vector (AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) [1]. The specific mechanism involves the health endpoint improperly returning the API_KEY parameter, which should not be accessible to the requester.

Impact

Successful exploitation allows an attacker to disclose stored credentials, potentially leading to further compromise of the LiteLLM installation. The confidentiality impact is limited (low), but the disclosure of API keys could enable lateral movement or access to other systems [1].

Mitigation

LiteLLM has issued an update to address this vulnerability. Users should apply the latest patch or upgrade to a fixed version as recommended by the vendor [1]. No workarounds are documented, and the vulnerability is not currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.