CVE-2026-12770 BerriAI litellm Admin Key key_management_endpoints.py improper authorization

What is CVE-2026-12770?

CVE-2026-12770 is a medium-severity missing authorization vulnerability in BerriAI litellm, published on 21 Jun 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/management_endpoints/key_management_endpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: 23781. It is recommended to apply a patch to fix this issue. The vendor was contacted early about this disclosure.

Weakness: CWE-285, CWE-266

Which versions are affected by CVE-2026-12770?

3 open source packages ship an affected version, including litellm. It affects 1 product.

Products include Litellm Litellm.

How do I fix CVE-2026-12770?

No fix has been published for CVE-2026-12770 yet. Limit exposure of the affected software until one is available.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2026-12770 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-12770 exists.

Other vulnerabilities in BerriAI litellm

• CVE-2026-42208 BerriAI LiteLLM SQL Injection Exploited Critical 9.3
• CVE-2026-59822 BerriAI LiteLLM Improper Authentication Exploited High 8.8
• CVE-2026-42271 BerriAI LiteLLM Command Injection Exploited High 8.7
• CVE-2024-5751 Remote Code Execution in BerriAI/litellm Critical 9.8
• CVE-2024-2952 Server-Side Template Injection in BerriAI/litellm Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6qr3-3g89-m4jj, PYSEC-2026-4068.