Back to Database
Status published
High
CVE-2025-0330
Exposure of Sensitive Information in berriai/litellm
Vulnerability Description
In berriai/litellm version v1.52.1, an issue in proxy_server.py causes the leakage of Langfuse API keys when an error occurs while parsing team settings. This vulnerability exposes sensitive information, including langfuse_secret and langfuse_public_key, which can provide full access to the Langfuse project storing all requests.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0330
Credits & Attribution
No credits recorded in the NVD database.
More from berriai
View All →CVE-2025-0628
Improper Authorization in BerriAI/litellm
High
8.1
CVE-2024-9606
Improper Output Neutralization for Logs in berriai/litellm
High
7.5
CVE-2024-8984
Denial of Service (DoS) in berriai/litellm
High
7.5
CVE-2024-6825
Remote Code Execution in BerriAI/litellm
High
8.8
CVE-2024-6587
SSRF in berriai/litellm
High
7.5
Affected Vendor
berriai
View all reports →Affected Software
berriai/litellm
Vulnerable Versions:
unspecified
Timeline
Official Publish:
March 20th, 2025
Last Modified:
March 20th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.