Medium severity5.4NVD Advisory· Published Jun 21, 2026· Updated Jun 24, 2026
CVE-2026-12770
CVE-2026-12770
Description
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/management_endpoints/key_management_endpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 23781. It is recommended to apply a patch to fix this issue. The vendor was contacted early about this disclosure.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
8- github.com/BerriAI/litellm/pull/23781nvdIssue TrackingPatch
- gist.github.com/YLChen-007/993c68152b2c770d53590f1684c755d4nvdExploitThird Party Advisory
- github.com/advisories/GHSA-6qr3-3g89-m4jjghsaADVISORY
- vuldb.com/cve/CVE-2026-12770nvdThird Party AdvisoryVDB Entry
- vuldb.com/submit/811279nvdThird Party AdvisoryVDB EntryExploit
- vuldb.com/vuln/372512nvdThird Party AdvisoryVDB Entry
- vuldb.com/vuln/372512/ctinvdPermissions RequiredVDB Entry
- nvd.nist.gov/vuln/detail/CVE-2026-12770ghsa
News mentions
1- Litellm: Ten Vulnerabilities Including Auth Bypass and SSRF Disclosed TogetherVypr Intelligence · Jun 21, 2026