CVE-2025-11203: LiteLLM information disclosure through the health endpoint API_KEY parameter

Summary

CVE-2025-11203 is an information disclosure flaw in LiteLLM's health endpoint, triggered by how it handles the API_KEY parameter. A remote attacker can exploit it to read sensitive information, including stored credentials, which can lead to further compromise. Exploitation requires authentication.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Related items

• LowGHSA-3gh4-cghq-f8v4: Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`Similar attack · GitHub Advisory Database
• LowGHSA-4x9p-g9wm-8q7f: Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`Similar attack · GitHub Advisory Database
• LowSeptember 2026 Cyber Threat Landscape: Global Attacks Jump 48% as Phishing and GenAI Data Exposure RiseSimilar attack · Check Point Research
• InfoSystemic privacy risks of personal data exposure through conversational large language model agentsSimilar attack · OpenAlex (peer-reviewed AI security)
• InfoSensitive-Topic Leakage Through LLM Routing Metadata: Measurement and MitigationSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)