CVE-2026-12797: berriai litellm Improper Authorization
Vulnerability summary
CVE-2026-12797 is a medium (CVSS 6.5) Improper Authorization vulnerability in berriai litellm. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 32.7% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 21-06-2026PublishedVulnerability first disclosed.
- 22-06-2026Last modifiedVulnerability information updated.
Description
A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function async_pre_call_hook of the file enterprise/enterprise_hooks/banned_keywords.py of the component Completions Interface. The manipulation of the argument prompt results in incorrect authorization. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.
CVSS metrics
9 scores · 3 sources · 4 versions- OSV · PypiEcosystem advisory · calculated5.3MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
- NVDNIST2.1LowCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XDiffers
- OSV · PypiEcosystem advisory · calculated6.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- NVDNIST6.3MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- NVDNIST6.5MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS trend
Probability
0.40%
Chance of exploitation in the next 30 days
Percentile
33%
Versus all other CVEs
30-day change
0.00 pp
From 0.40% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 found078179224F07Cc4E39E4F141A18C817A
Maturity: poc
Exploit Reference (vuldb.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-285Improper AuthorizationThe product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
- CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Affected systems
Berriai1 product
- litellm1.82.0 | 1.82.1 | 1.82.2 | 1.82.3 | 1.82.4 | 1.82.5
Litellm1 product
- litellm≤ 1.82.5
PyPI1 product
- litellm≤ 1.82.5
3 vendors · 3 products
References
9 links
- github.com/BerriAI/litellmPACKAGE
- pypi.org/project/litellmPACKAGE