CVE - CVE-2025-0628

CVE-ID
CVE-2025-0628	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
An improper authorization vulnerability exists in the main-latest version of BerriAI/litellm. When a user with the role 'internal_user_viewer' logs into the application, they are provided with an overly privileged API key. This key can be used to access all the admin functionality of the application, including endpoints such as '/users/list' and '/users/get_users'. This vulnerability allows for privilege escalation within the application, enabling any account to become a PROXY ADMIN.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://github.com/berriai/litellm/commit/566d9354aab4215091b2e51ad0333e948125fa1b URL:https://github.com/berriai/litellm/commit/566d9354aab4215091b2e51ad0333e948125fa1b MISC:https://huntr.com/bounties/6c0e2f75-2d03-42f9-9530-e16a973317fc URL:https://huntr.com/bounties/6c0e2f75-2d03-42f9-9530-e16a973317fc
Assigning CNA
Protect AI
Date Record Created
20250121	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250121)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)