Catálogo de CVE

CVE-2026-12797

A security flaw has been discovered in BerriAI litellm…

A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function async_pre_call_hook of the file enterprise/enterprise_hooks/banned_keywords.py of the component Completions Interface. The manipulation of the argument prompt results in incorrect authorization. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.

Gravidade: Medium · CVSS 6.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Published: Jun 21, 2026, 9:15:08 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.40% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	litellm	Not reported	UnknownSource applicability is not established	Provider not reported
PyPIRelease not reported	litellm	Not reported	UnknownSource applicability is not established	GHSA-P897-VF7J-F5H8[PYSEC-2026-4074]Oct 1, 2026, 5:45:12 PM UTC

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	litellm	Not reported	UnknownSource applicability is not established	Provider not reported
PyPIRelease not reported	litellm	Not reported	UnknownSource applicability is not established	GHSA-P897-VF7J-F5H8[PYSEC-2026-4074]Oct 1, 2026, 5:45:12 PM UTC

Original provider fields

{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "litellm",
      "fixed_version": "",
      "applicability_unknown": true
    },
    {
      "name": "litellm",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "1.82.5"
            }
          ]
        }
      ],
      "ecosystem": "PyPI",
      "fixed_version": "",
      "provider_record_id": "GHSA-P897-VF7J-F5H8",
      "applicability_unknown": true
    },
    {
      "name": "litellm",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "1.82.5"
            }
          ]
        }
      ],
      "ecosystem": "PyPI",
      "provider_url": "https://osv.dev/vulnerability/PYSEC-2026-4074",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "PYSEC-2026-4074",
      "provider_updated_at": "2026-10-01T17:45:12.788897601Z",
      "applicability_unknown": true
    },
    {
      "name": "litellm",
      "ranges": [
        {
          "fixed": "",
          "introduced": "",
          "last_affected": "1.82.5",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12797",
      "fixed_version": "",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-12797",
      "provider_updated_at": "2026-10-25T23:10:00.167"
    }
  ]
}

OpenFactory catalog packages

Nenhum pacote correspondente neste catálogo.

Observado: Oct 29, 2026, 10:17:24 AM UTC

Referências

[FIRST EPSS] · [GitHub Advisory Database] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]