agentic-ai-vass-tools (>=0.1.0, <=0.4.0), ai-agents (>=0.0.4, <=0.0.52) +81 more potentially affected by CVE-2025-0628 via litellm (>=1.0.0, <=1.61.9)

litellm PYPI version =1.0.0, =0.1.0, =0.0.4, =0.1.3, =0.1.0, =0.67.0, =0.1.5, =0.0.1, =1.6.24, =0.1.12rc1, =0.1.0, =0.60.2, =0.3.6, =0.4.2 and more Source cves: CVE-2025-0628 Source advisory: OSV:PYSEC-2026-1546...

autollm (>=0.0.1, <=0.0.3) potentially affected by CVE-2025-0628 via litellm (0.8.4)

litellm PYPI version 0.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autollm =0.0.1, =0.0.3 Source cves: CVE-2025-0628 Source advisory: OSV:PYSEC-2026-1546...

aiconsole (>=0.2.0, <=0.2.7), fastrepl (>=0.0.19, <=0.0.20) potentially affected by CVE-2025-0628 via litellm (0.6.6)

litellm PYPI version 0.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - aiconsole =0.2.0, =0.0.19, =0.0.20 Source cves: CVE-2025-0628 Source advisory: OSV:PYSEC-2026-1546...

otter-ai (>=0.0.0a0, <=0.0.0a5) potentially affected by CVE-2025-0628 via litellm (0.1.400)

litellm PYPI version 0.1.400 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - otter-ai =0.0.0a0, =0.0.0a5 Source cves: CVE-2025-0628 Source advisory: OSV:PYSEC-2026-1546...

yival (>=0.1.0a5, <=0.1.0a10) potentially affected by CVE-2025-0628 via litellm (0.1.607)

litellm PYPI version 0.1.607 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - yival =0.1.0a5, =0.1.0a10 Source cves: CVE-2025-0628 Source advisory: OSV:PYSEC-2026-1546...

open-interpreter (>=0.1.12, <=0.1.17), promptmodel (>=0.0.25, <=0.0.31) potentially affected by CVE-2025-0628 via litellm (0.13.2)

litellm PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.12, =0.0.25, =0.0.31 Source cves: CVE-2025-0628 Source advisory: OSV:PYSEC-2026-1546...

CVE-2026-12799

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the function uiviewusers of the file litellm/proxy/managementendpoints/internaluserendpoints.py of the component Incomplete Fix CVE-2025-0628. Such manipulation leads to improper authorization. I...

PT-2026-51213

Name of the Vulnerable Software and Affected Versions BerriAI litellm versions prior to 1.82.3 Description Improper authorization occurs in the ui view users function located in the litellm/proxy/management endpoints/internal user endpoints.py file. This flaw allows a remote attacker to bypass...

agentic-ai-vass-tools (>=0.1.0, <=0.4.0), ai-agents (>=0.0.4, <=0.0.52) +81 more potentially affected by CVE-2025-0628 via litellm (>=1.0.0, <=1.61.9)

litellm PYPI version =1.0.0, =0.1.0, =0.0.4, =0.1.3, =0.1.0, =0.67.0, =0.1.5, =0.0.1, =1.6.24, =0.1.12rc1, =0.1.0, =0.60.2, =0.3.6, =0.4.2 and more Source cves: CVE-2025-0628 Source advisory: SNYK:PYTHON-LITELLM-9511164...

prompt2model (0.0.9) potentially affected by CVE-2025-0628 via litellm (0.1.583)

litellm PYPI version 0.1.583 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - prompt2model 0.0.9 Source cves: CVE-2025-0628 Source advisory: OSV:GHSA-FJCF-3J3R-78RP...

otter-ai (>=0.0.0a0, <=0.0.0a5) potentially affected by CVE-2025-0628 via litellm (0.1.400)

litellm PYPI version 0.1.400 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - otter-ai =0.0.0a0, =0.0.0a5 Source cves: CVE-2025-0628 Source advisory: OSV:GHSA-FJCF-3J3R-78RP...

agentic-ai-vass-tools (>=0.1.0, <=0.4.0), ai-agents (>=0.0.4, <=0.0.52) +81 more potentially affected by CVE-2025-0628 via litellm (>=1.0.0, <=1.61.9)

litellm PYPI version =1.0.0, =0.1.0, =0.0.4, =0.1.3, =0.1.0, =0.67.0, =0.1.5, =0.0.1, =1.6.24, =0.1.12rc1, =0.1.0, =0.60.2, =0.3.6, =0.4.2 and more Source cves: CVE-2025-0628 Source advisory: GHSA-FJCF-3J3R-78RP...

aiconsole (>=0.2.0, <=0.2.7), fastrepl (>=0.0.19, <=0.0.20) potentially affected by CVE-2025-0628 via litellm (0.6.6)

litellm PYPI version 0.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - aiconsole =0.2.0, =0.0.19, =0.0.20 Source cves: CVE-2025-0628 Source advisory: OSV:GHSA-FJCF-3J3R-78RP...

bavisitter (>=0.0.0, <=0.1.0rc1), cosmoai (>=0.8.8, <=0.9.1.11) +1 more potentially affected by CVE-2025-0628 via litellm (0.13.0)

litellm PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - bavisitter =0.0.0, =0.8.8, =0.9.1.11 - open-interpreter 0.1.11 Source cves: CVE-2025-0628 Source advisory: OSV:GHSA-FJCF-3J3R-78RP...

open-interpreter (>=0.1.12, <=0.1.17), promptmodel (>=0.0.25, <=0.0.31) potentially affected by CVE-2025-0628 via litellm (0.13.2)

litellm PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.12, =0.0.25, =0.0.31 Source cves: CVE-2025-0628 Source advisory: OSV:GHSA-FJCF-3J3R-78RP...

autogpt-forge (>=0.1.0, <=0.1.3), cosmoai (>=0.6.0, <=0.6.6) +12 more potentially affected by CVE-2025-0628 via litellm (0.1.7713)

litellm PYPI version 0.1.7713 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autogpt-forge =0.1.0, =0.6.0, =0.2.4, =0.1.11, =0.0.1, =0.1.7, =0.1.0, =0.1.2, =0.0.2, =0.0.3 - yival 0.1.0a4 Source cves: CVE-2025-0628 Source...

agentic-ai-vass-tools (>=0.1.0, <=0.4.0), ai-agents (>=0.0.4, <=0.0.52) +81 more potentially affected by CVE-2025-0628 via litellm (>=1.0.0, <=1.61.9)

litellm PYPI version =1.0.0, =0.1.0, =0.0.4, =0.1.3, =0.1.0, =0.67.0, =0.1.5, =0.0.1, =1.6.24, =0.1.12rc1, =0.1.0, =0.60.2, =0.3.6, =0.4.2 and more Source cves: CVE-2025-0628 Source advisory: OSV:GHSA-FJCF-3J3R-78RP...

promptulate (1.9.0) potentially affected by CVE-2025-0628 via litellm (0.12.12)

litellm PYPI version 0.12.12 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - promptulate 1.9.0 Source cves: CVE-2025-0628 Source advisory: OSV:GHSA-FJCF-3J3R-78RP...

CVE-2025-0628

CVE-2025-0628 affects the main-latest version of BerriAI/litellm. The issue allows an user with the internal_user_viewer role to obtain an overly privileged API key that can access admin endpoints (e.g., /users/list, /users/get_users), enabling privilege escalation to a PROXY ADMIN. Multiple sour...

CVE-2025-0628 Improper Authorization in BerriAI/litellm

An improper authorization vulnerability exists in the main-latest version of BerriAI/litellm. When a user with the role 'internaluserviewer' logs into the application, they are provided with an overly privileged API key. This key can be used to access all the admin functionality of the applicatio...