CVE-2025-11203

LOW LAB

LiteLLM - Authenticated Exposure of Sensitive Information via Health Endpoint API_KEY Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-11203. PoCs published by learner202649.

AI-analyzed exploit summary This repository contains a functional exploit for CVE-2025-11203, demonstrating how the LiteLLM `/health` endpoint leaks API keys due to incomplete sanitization in versions < 1.63.14. The exploit includes a Dockerized vulnerable environment and a Python script to extract leaked credentials.

Description

LiteLLM Information health API_KEY Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LiteLLM. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the API_KEY parameter provided to the health endpoint. The issue results from exposing sensitive information to an unauthorized actor. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-26585.

Exploits (1)

github WORKING POC
by learner202649 · pythonpoc
https://github.com/learner202649/CVE-2025-11203-PoC

This repository contains a functional exploit for CVE-2025-11203, demonstrating how the LiteLLM `/health` endpoint leaks API keys due to incomplete sanitization in versions < 1.63.14. The exploit includes a Dockerized vulnerable environment and a Python script to extract leaked credentials.

Classification
Working Poc 100%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: LiteLLM < 1.63.14
Auth required
Prerequisites: authenticated access to the `/health` endpoint · LiteLLM configured with API keys
devstral-2 · analyzed May 19, 2026 Full analysis →

References (2)

Core 2
Core References
Third Party Advisory x_research-advisory
https://www.zerodayinitiative.com/advisories/ZDI-25-929/

Scores

CVSS v3 3.5
EPSS 0.0010
EPSS Percentile 27.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Lab Environment

COMMUNITY
Community Lab
docker pull ghcr.io/berriai/litellm:v1.83.10-stable

Details

CWE
CWE-200
Status published
Products (1)
LiteLLM/LiteLLM 10.2.2025
Published Oct 29, 2025
Tracked Since Feb 18, 2026