Low severity · published Oct 29, 2025
CVE-2025-11203
LiteLLM Information health API_KEY Information Disclosure Vulnerability
3.5
CVSS
0.3%
EPSS
No
On KEV
Description
LiteLLM Information health API_KEY Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LiteLLM. Authentication is required to exploit this vulnerability.
The specific flaw exists within the handling of the API_KEY parameter provided to the health endpoint. The issue results from exposing sensitive information to an unauthorized actor. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-26585.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
LiteLLM · LiteLLM
10.2.2025 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-11203
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-11203
docs.litellm.ai
https://docs.litellm.ai/release_notes/v1.63.14-stable
www.zerodayinitiative.com
https://www.zerodayinitiative.com/advisories/ZDI-25-929/
More from LiteLLM
9.8
CVE-2026-42208
LiteLLM: SQL injection in Proxy API key verification
8.8
CVE-2026-42271
LiteLLM: Authenticated command execution via MCP stdio test endpoints
8.8
CVE-2026-33634
Trivy ecosystem supply chain briefly compromised
8.2
CVE-2026-59822
LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
9.8
CVE-2026-49468
LiteLLM: Authentication Bypass via Host Header Injection