CVE-2026-85178
Helicone Cross-Tenant Provider Key Disclosure via Missing Organization Filter
CVSS Score
7.7
EPSS Score
0.0%
EPSS Percentile
0th
Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails to validate the requester's organization against the vault key's organization identifier. Attackers with admin or owner privileges in any organization can retrieve decrypted upstream provider credentials for other tenants, including plaintext OpenAI, Anthropic, and Bedrock API keys.
| CWE | CWE-639 |
| Vendor | helicone |
| Product | helicone |
| Published | Sep 3, 2026 |
| Last Updated | Sep 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for helicone helicone
Be the first to know when new high vulnerabilities affecting helicone helicone are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
Helicone / helicone
0 < ca34549ea56f7ed587843f82d9cc19baa1f36ba4
References
github.com: https://github.com/Helicone/helicone/issues/5712 github.com: https://github.com/Helicone/helicone github.com: https://github.com/Helicone/helicone/commit/ca34549ea56f7ed587843f82d9cc19baa1f36ba4 vulncheck.com: https://www.vulncheck.com/advisories/helicone-cross-tenant-provider-key-disclosure-via-missing-organization-filter
Credits
🔍 George Chen