CVE-2026-85178 Details
Description
Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails to validate the requester's organization against the vault key's organization identifier. Attackers with admin or owner privileges in any organization can retrieve decrypted upstream provider credentials for other tenants, including plaintext OpenAI, Anthropic, and Bedrock API keys.
A vulnerability exists in Helicone's VaultManager.getDecryptedProviderKeyById() function, specifically within the GET /v1/vault/key/{providerKeyId} endpoint. The issue arises because the function fails to verify the requester's organization against the vault key's organization identifier. As a result, attackers with admin or owner privileges in any organization can access decrypted provider credentials, including plaintext API keys for OpenAI, Anthropic, and AWS Bedrock, belonging to other tenants.
The vulnerability has been addressed in version 0.0.0 through the latest commit on the main branch. Users should update to this version.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 3, 2026CISA-ADP
Assessed Sep 3, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Helicone/helicone/issues/5712 | CISA-ADP | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/Helicone/helicone | [email protected] | Source CodeVendor |
| https://github.com/Helicone/helicone/commit/ca34549ea56f7ed587843f82d9cc19baa1f36ba4 | [email protected] | Source CodeVendor |
| https://github.com/Helicone/helicone/issues/5712 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://www.vulncheck.com/advisories/helicone-cross-tenant-provider-key-disclosure-via-missing-organization-filter | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-639 | Authorization Bypass Through User-Controlled Key | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Helicone | >= 0, < ca34549ea56f7ed587843f82d9cc19baa1f36ba4 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 17, 2026 | CVE Modified | [email protected] |
| Sep 3, 2026 | New CVE Received | [email protected] |
| Sep 3, 2026 | CVE Modified | CISA-ADP |