CVE-2026-12797
BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorization
- State
- Published
- Severity
- 5.3 Medium
- Published
- Jun 21, 2026
- Updated
- Jun 22, 2026
- Reserved
- Jun 20, 2026
Description
A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function async_pre_call_hook of the file enterprise/enterprise_hooks/banned_keywords.py of the component Completions Interface. The manipulation of the argument prompt results in incorrect authorization. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 6.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 6.5 Medium | AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
litellmBerriAI |
|
References
- VDB-372559 | BerriAI litellm Completions banned_keywords.py async_pre_call_hook authorizationvdb-entrytechnical-description
- VDB-372559 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- CVE-2026-12797 | CVE Analysis and Reportthird-party-advisory
- Submit #811288 | litellm <= 1.82.5 Incorrect Authorization (CWE-863)third-party-advisory
- https://gist.github.com/YLChen-007/078179224f07cc4e39e4f141a18c817aexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.