CVE-2026-85178: Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails t
highvulnerabilityLLM-Specific
security
Summary
Helicone, a platform for managing AI services, has a security flaw in its VaultManager.getDecryptedProviderKeyById() function (the code that retrieves and decrypts API keys) where it doesn't check whether the person requesting a key actually belongs to the organization that owns it. This means attackers with admin or owner privileges in one organization can steal decrypted API keys (like OpenAI or Anthropic credentials) from completely different organizations.
Vulnerability Details
CVSS Score
7.7(high)
EPSS (30-day exploit probability)
EPSS: 0.0%
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack Vector
network
Attack Complexity
low
Privileges Required
low
User Interaction
none
Disclosure Date
September 3, 2026
Classification
Attack Type
Data Extraction
Attack SophisticationModerate
Impact (CIA+S)
confidentialityintegrity
Taxonomy References
CWE (Weakness Type)
Affected Vendors
OpenAIAnthropicAmazon
Related Issues
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-85178
First tracked: September 3, 2026 at 02:09 PM
Classified by LLM (prompt v3) · confidence: 95%