CVE-2026-108575 - Vulnerability Details

- BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization

Description

A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_managers/main.py of the component Secret Resolution. The manipulation of the argument api_key leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published: 2026-10-11

Score: 5.3 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The vulnerability is located in the get_secret function of the secret resolution component in LiteLLM. When an attacker supplies a crafted api_key parameter, the function bypasses its intended authorization checks and returns secrets that should be protected. This flaw allows the attacker to read sensitive credentials or configuration data that an authenticated user should not see, thereby compromising confidentiality of secrets within the system. This flaw maps to CWE-639: Abuse of Authorization.

Affected Systems

The issue is present in BerriAI LiteLLM releases up to and including version 1.94.0. It affects the secret_managers/main.py module in the Secret Resolution component. Versions newer than 1.94.0 are presumed to not contain the flaw, but the vendor did not confirm a fix.

Risk and Exploitability

The CVSS score of 5.3 indicates a medium severity vulnerability. EPSS is not available, so the likelihood of exploitation is unclear. The flaw can be triggered remotely through the get_secret API, and the vendor has not released a patch or response. The vulnerability is not listed in the CISA KEV catalog. Given the potential for unauthorized secret disclosure, the risk is significant and exploitation could lead to credential compromise or further lateral movement within the environment.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

BerriAI

LiteLLM

affected

Version	Status	Constraints
`1.0`	affected	—
`1.1`	affected	—
`1.2`	affected	—
`1.3`	affected	—
`1.4`	affected	—
`1.5`	affected	—
`1.6`	affected	—
`1.7`	affected	—
`1.8`	affected	—
`1.9`	affected	—
`1.10`	affected	—
`1.11`	affected	—
`1.12`	affected	—
`1.13`	affected	—
`1.14`	affected	—
`1.15`	affected	—
`1.16`	affected	—
`1.17`	affected	—
`1.18`	affected	—
`1.19`	affected	—
`1.20`	affected	—
`1.21`	affected	—
`1.22`	affected	—
`1.23`	affected	—
`1.24`	affected	—
`1.25`	affected	—
`1.26`	affected	—
`1.27`	affected	—
`1.28`	affected	—
`1.29`	affected	—
`1.30`	affected	—
`1.31`	affected	—
`1.32`	affected	—
`1.33`	affected	—
`1.34`	affected	—
`1.35`	affected	—
`1.36`	affected	—
`1.37`	affected	—
`1.38`	affected	—
`1.39`	affected	—
`1.40`	affected	—
`1.41`	affected	—
`1.42`	affected	—
`1.43`	affected	—
`1.44`	affected	—
`1.45`	affected	—
`1.46`	affected	—
`1.47`	affected	—
`1.48`	affected	—
`1.49`	affected	—
`1.50`	affected	—
`1.51`	affected	—
`1.52`	affected	—
`1.53`	affected	—
`1.54`	affected	—
`1.55`	affected	—
`1.56`	affected	—
`1.57`	affected	—
`1.58`	affected	—
`1.59`	affected	—
`1.60`	affected	—
`1.61`	affected	—
`1.62`	affected	—
`1.63`	affected	—
`1.64`	affected	—
`1.65`	affected	—
`1.66`	affected	—
`1.67`	affected	—
`1.68`	affected	—
`1.69`	affected	—
`1.70`	affected	—
`1.71`	affected	—
`1.72`	affected	—
`1.73`	affected	—
`1.74`	affected	—
`1.75`	affected	—
`1.76`	affected	—
`1.77`	affected	—
`1.78`	affected	—
`1.79`	affected	—
`1.80`	affected	—
`1.81`	affected	—
`1.82`	affected	—
`1.83`	affected	—
`1.84`	affected	—
`1.85`	affected	—
`1.86`	affected	—
`1.87`	affected	—
`1.88`	affected	—
`1.89`	affected	—
`1.90`	affected	—
`1.91`	affected	—
`1.92`	affected	—
`1.93`	affected	—
`1.94.0`	affected	—

No data.

Vendor Product Confidence Versions

Litellm

95%

Version	Status	Scheme	Platform
`[0,*]`	affected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade LiteLLM to the most recent release after 1.94.0, ensuring the get_secret function is patched.
Restrict access to the get_secret API so that only authenticated and authorized users can invoke it, and add explicit authorization checks for the api_key parameter.
Audit existing deployment for any public or unrestricted endpoints that expose get_secret and disable or secure them.

Generated by OpenCVE AI on October 12, 2026 at 01:22 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00201.

Exploitation poc

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/user-attachments/assets/039cccbf-f4a5-460a-aec2-120049634200
https://nvd.nist.gov/vuln/detail/CVE-2026-108575
https://vuldb.com/cve/CVE-2026-108575
https://vuldb.com/submit/959179
https://vuldb.com/vuln/416232
https://vuldb.com/vuln/416232/cti
https://www.cve.org/CVERecord?id=CVE-2026-108575

History

Thu, 15 Oct 2026 16:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 12 Oct 2026 00:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-639
References		https://nvd.nist.gov/vuln/detail/CVE-2026-108575 https://www.cve.org/CVERecord?id=CVE-2026-108575
Metrics	threat_severity `None`	threat_severity `Moderate`

Sun, 11 Oct 2026 12:15:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_managers/main.py of the component Secret Resolution. The manipulation of the argument api_key leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title		BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization
First Time appeared		Litellm Litellm litellm
Weaknesses		CWE-266 CWE-285
CPEs		cpe:2.3:a:litellm:litellm::::::::
Vendors & Products		Litellm Litellm litellm
References		https://github.com/user-attachments/assets/039cccbf-f4a5-460a-aec2-120049634200 https://vuldb.com/cve/CVE-2026-108575 https://vuldb.com/submit/959179 https://vuldb.com/vuln/416232 https://vuldb.com/vuln/416232/cti
Metrics		cvssV2_0 `{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C'}` cvssV3_0 `{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}` cvssV3_1 `{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}` cvssV4_0 `{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}`

Subscriptions

Litellm Litellm

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-10-11T12:00:13.105Z

Updated: 2026-10-15T15:18:06.106Z

Reserved: 2026-10-10T15:40:00.241Z

Link: CVE-2026-108575

Vulnrichment

Updated: 2026-10-15T13:51:17.221Z

NVD

Status : Deferred

Published: 2026-10-11T12:16:53.210

Modified: 2026-10-15T16:17:36.387

Link: CVE-2026-108575

Redhat

Severity : Moderate

Publid Date: 2026-10-11T12:00:13Z

Links: CVE-2026-108575 - Bugzilla

OpenCVE Enrichment

Updated: 2026-10-12T01:30:03Z

Weaknesses

CWE-266
Incorrect Privilege Assignment
CWE-285
Improper Authorization
CWE-639
Authorization Bypass Through User-Controlled Key

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Exploitation poc

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object