CVE-2025-0628

🗓️ 20 Mar 2025 10:10:45Reported by @huntr_aiType

cve🔗 web.nvd.nist.gov👁 98 Views🌐 WEB

Improper authorization in BerriAI/litellm grants excessive access to internal user accounts.

Reporter	Title	Published	Views	Family All 19
Huntr	Logging into webui as view only internal user provides overly privileged bearer key	14 Nov 202416:44	–	huntr
Circl	CVE-2025-0628	20 Mar 202512:48	–	circl
CNNVD	LiteLLM 授权问题漏洞	20 Mar 202500:00	–	cnnvd
Cvelist	CVE-2025-0628 Improper Authorization in BerriAI/litellm	20 Mar 202510:10	–	cvelist
EUVD	EUVD-2025-6827	3 Oct 202520:07	–	euvd
EUVD	EUVD-2026-38158	21 Jun 202610:00	–	euvd
Github Security Blog	LiteLLM Has an Improper Authorization Vulnerability	20 Mar 202512:32	–	github
NVD	CVE-2025-0628	20 Mar 202510:15	–	nvd
OSV	CVE-2025-0628 Improper Authorization in BerriAI/litellm	20 Mar 202510:10	–	osv
OSV	GHSA-FJCF-3J3R-78RP LiteLLM Has an Improper Authorization Vulnerability	20 Mar 202512:32	–	osv

Vulners

Node

berriai berriai/litellmRange<1.61.15

[
  {
    "vendor": "berriai",
    "product": "berriai/litellm",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "v1.61.15-nightly",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/berriai/litellm/commit/566d9354aab4215091b2e51ad0333e948125fa1b
huntr	www.huntr.com/bounties/6c0e2f75-2d03-42f9-9530-e16a973317fc

Parameter	Position	Path	Description	CWE
Authorization	header	/users/list	Improper authorization allows a user with an elevated API key to access admin endpoints.	CWE-266
Authorization	header	/users/get_users	Improper authorization allows a user with an elevated API key to access admin endpoints.	CWE-266

17 Jun 2026 08:26Current

8.2High risk

Vulners AI Score8.2

CVSS 38.1

EPSS0.00315

SSVC

CWE-266