A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. (CVE-2026-108575)

CVE-2026-108575 affects BerriAI LiteLLM up to version 1.94.0 in the Secret Resolution component, specifically the get_secret function in secret_managers/main.py. The vulnerability arises from improper authorization when the api_key argument is manipulated, enabling remote attackers to potentially access or interfere with secret data. The CVSS 3.1 base score is 6.3, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. The vendor has not issued a response or patch, and the exploit has been publicly disclosed.

The vulnerability allows remote attackers to bypass proper authorization controls by manipulating the api_key parameter, potentially leading to unauthorized access to secrets or disruption of service. The CVSS score of 6.3 indicates a moderate impact on confidentiality, integrity, and availability. No confirmed exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should monitor for vendor updates and consider restricting access to the affected component or implementing compensating controls to protect the api_key parameter until a fix is released.