Medium severity5.4NVD Advisory· Published Jun 21, 2026· Updated Jun 24, 2026
CVE-2026-12770
CVE-2026-12770
Description
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/management_endpoints/key_management_endpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 23781. It is recommended to apply a patch to fix this issue. The vendor was contacted early about this disclosure.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
litellmPyPI | <= 1.63.1 | — |
Affected products
2Patches
Vulnerability mechanics
References
8- github.com/BerriAI/litellm/pull/23781nvdIssue TrackingPatchWEB
- gist.github.com/YLChen-007/993c68152b2c770d53590f1684c755d4nvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-6qr3-3g89-m4jjghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-12770ghsaADVISORY
- vuldb.com/cve/CVE-2026-12770nvdThird Party AdvisoryVDB EntryWEB
- vuldb.com/submit/811279nvdThird Party AdvisoryVDB EntryExploitWEB
- vuldb.com/vuln/372512nvdThird Party AdvisoryVDB EntryWEB
- vuldb.com/vuln/372512/ctinvdPermissions RequiredVDB EntryWEB
News mentions
1- Litellm: Ten Vulnerabilities Including Auth Bypass and SSRF Disclosed TogetherVypr Intelligence · Jun 21, 2026