CVE-2026-85178CWE-639

CVE-2026-85178

High · published September 3, 2026

CVSS v3.1
7.7
EPSS
0%
Percentile
34.7
In the wild
Unconfirmed
What it is

Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails to validate the requester's organization against the vault key's organization identifier. Attackers with admin or owner privileges in any organization can retrieve decrypted upstream provider credentials for other tenants, including plaintext OpenAI, Anthropic, and Bedrock API keys.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
8.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00415 · 34.7th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-09-03T19:17Z
References (5)
https://github.com/Helicone/helicone · [email protected]https://github.com/Helicone/helicone/commit/ca34549ea56f7ed587843f82d9cc19baa1f36ba4 · [email protected]https://github.com/Helicone/helicone/issues/5712 · [email protected]https://www.vulncheck.com/advisories/helicone-cross-tenant-provider-key-disclosure-via-missing-organization-filter · [email protected]https://github.com/Helicone/helicone/issues/5712 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 05 SEP 03:44Z
    EPSS moved — → 0%
    epss
  • 03 SEP 14:12Z
    Helicone Cross-Tenant Provider Key Disclosure via Missing Organization Filter
    cvelistv5