{"data":{"id":"46dd25ab-9c28-46b3-8d21-c0ae6ea27435","title":"CVE-2026-85178: Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails…","summary":"Helicone's VaultManager.getDecryptedProviderKeyById() function, reachable through the GET /v1/vault/key/{providerKeyId} endpoint, does not check that the requester's organization matches the vault key's organization identifier. An attacker with admin or owner privileges in any organization can retrieve decrypted upstream provider credentials belonging to other tenants, including plaintext OpenAI, Anthropic, and Bedrock API keys.","solution":"N/A -- no mitigation discussed in source.","labels":["security","privacy"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-85178","publishedAt":"2026-09-03T15:17:38.933Z","cveId":"CVE-2026-85178","cweIds":["CWE-639"],"cvssScore":"7.7","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI","Anthropic","Amazon"],"affectedVendorsRaw":["Helicone","OpenAI","Anthropic","AWS Bedrock"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Helicone decrypted provider key retrieval via GET /v1/vault/key/{providerKeyId}","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00415,"epssCheckedAt":"2026-11-04T06:10:14.410Z","kevDateAdded":null,"advisoryAliases":["GHSA-2f4g-hjp3-9wf4"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-01T18:08:46.741Z","patchAvailable":null,"disclosureDate":"2026-09-03T15:17:38.933Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}