Unrated severityNVD Advisory· Published Jun 21, 2026· Updated Jun 21, 2026
BerriAI litellm Admin Key key_management_endpoints.py improper authorization
CVE-2026-12770
Description
A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/management_endpoints/key_management_endpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 23781. It is recommended to apply a patch to fix this issue. The vendor was contacted early about this disclosure.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
6- github.com/BerriAI/litellm/pull/23781mitreissue-trackingpatch
- gist.github.com/YLChen-007/993c68152b2c770d53590f1684c755d4mitreexploit
- vuldb.com/cve/CVE-2026-12770mitrethird-party-advisory
- vuldb.com/submit/811279mitrethird-party-advisory
- vuldb.com/vuln/372512mitrevdb-entry
- vuldb.com/vuln/372512/ctimitresignaturepermissions-required
News mentions
1- Litellm: Ten Vulnerabilities Including Auth Bypass and SSRF Disclosed TogetherVypr Intelligence · Jun 21, 2026