Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-85178

Helicone Cross-Tenant Provider Key Disclosure via Missing Organization Filter

CVSS 4.0 8.3 HIGHCVSS 3.1 7.7 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-85178

Published

Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails to validate the requester's organization against the vault key's organization identifier. Attackers with admin or owner privileges in any organization can retrieve decrypted upstream provider credentials for other tenants, including plaintext OpenAI, Anthropic, and Bedrock API keys.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-85178

Published

helicone

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Helicone",
                    "product": "helicone",
                    "defaultStatus": "unaffected",
                    "packageURL": "pkg:github/Helicone/helicone",
                    "versions": [
                        {
                            "version": "0",
                            "lessThan": "ca34549ea56f7ed587843f82d9cc19baa1f36ba4",
                            "status": "affected",
                            "versionType": "git"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON