CVE-2026-12770: LiteLLM: Admin Key Handler Has Improper Authorization

June 21, 2026 (updated September 10, 2026)

A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/management_endpoints/key_management_endpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

References

gist.github.com/YLChen-007/993c68152b2c770d53590f1684c755d4
github.com/BerriAI/litellm
github.com/BerriAI/litellm/pull/23781
github.com/advisories/GHSA-6qr3-3g89-m4jj
nvd.nist.gov/vuln/detail/CVE-2026-12770
vuldb.com/cve/CVE-2026-12770
vuldb.com/submit/811279
vuldb.com/vuln/372512
vuldb.com/vuln/372512/cti

Code Behaviors & Features

Detect and mitigate CVE-2026-12770 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →