3.5

CVE-2025-11203: litellm

CVSS: 3.5v3.0LowDeferred
Published 29-10-2025Last modified 30-10-2025
Open JSON

Vulnerability summary

CVE-2025-11203 is a low (CVSS 3.5) vulnerability in litellm. EPSS estimates a 0.34% chance of exploitation in the next 30 days, higher than 26.5% of scored vulnerabilities.

Overall risk
14/100
0100
Low · default modelHow is this calculated?
CVSS score
3.5/10
010
Low · v3.0 (CVE.org)
EPSS score
0.34%
0%100%
Low · -0.07 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 29-10-2025
    PublishedVulnerability first disclosed.
  2. 30-10-2025
    Last modifiedVulnerability information updated.

Description

LiteLLM Information health API_KEY Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LiteLLM. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the API_KEY parameter provided to the health endpoint. The issue results from exposing sensitive information to an unauthorized actor. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-26585.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

0.34%

Chance of exploitation in the next 30 days

Percentile

27%

Versus all other CVEs

30-day change

-0.07 pp

From 0.42% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.34%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Litellm1 product

1 vendor · 1 product

References

2 links