{"data":{"id":"46dd25ab-9c28-46b3-8d21-c0ae6ea27435","title":"CVE-2026-85178: Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails t","summary":"Helicone, a platform for managing AI services, has a security flaw in its VaultManager.getDecryptedProviderKeyById() function (the code that retrieves and decrypts API keys) where it doesn't check whether the person requesting a key actually belongs to the organization that owns it. This means attackers with admin or owner privileges in one organization can steal decrypted API keys (like OpenAI or Anthropic credentials) from completely different organizations.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-85178","publishedAt":"2026-09-03T15:17:38.933Z","cveId":"CVE-2026-85178","cweIds":["CWE-639"],"cvssScore":"7.7","cvssSeverity":"high","severity":"high","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["OpenAI","Anthropic","Amazon"],"affectedVendorsRaw":["Helicone","OpenAI","Anthropic","AWS Bedrock"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-03T15:17:38.933Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}