CVE-2026-85178
Received Received - Intake

Authorization Bypass in VaultManager Provider Key Retrieval

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: VulnCheck

Description
Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails to validate the requester's organization against the vault key's organization identifier. Attackers with admin or owner privileges in any organization can retrieve decrypted upstream provider credentials for other tenants, including plaintext OpenAI, Anthropic, and Bedrock API keys.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-03
Last Modified
2026-09-03
Generated
2026-09-03
AI Q&A
2026-09-03
EPSS Evaluated
N/A
NVD
CVE-2026-85178
EUVD
EUVD-2026-70482

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
helicone helicone to ca34549ea56f7ed587843f82d9cc19baa1f36ba4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a missing organization validation in Helicone's VaultManager.getDecryptedProviderKeyById() function. Attackers with admin or owner privileges in any organization can retrieve decrypted upstream provider credentials for other tenants, including plaintext API keys for services like OpenAI, Anthropic, and Bedrock.

Detection Guidance

To detect this vulnerability, check Helicone logs for unauthorized access attempts to the GET /v1/vault/key/{providerKeyId} endpoint. Look for requests where the org_id in the query does not match the requester's organization. Use database queries to verify if VaultManager.getDecryptedProviderKeyById() returns keys outside the requester's organization.

Impact Analysis

If exploited, this vulnerability allows unauthorized access to sensitive API keys across different organizations. Attackers could use these keys to make unauthorized API calls, incur costs, or access proprietary AI services without permission.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements for data protection and privacy. It may result in non-compliance with GDPR (data breaches), HIPAA (unauthorized access to health data), and other regulations that require strict access controls and data protection.

Mitigation Strategies

Update Helicone to the latest commit (ca34549ea56f7ed587843f82d9cc19baa1f36ba4) or later. Ensure VaultManager.getDecryptedProviderKeyById() validates org_id in the query. Review and restrict admin/owner privileges. Monitor for unusual API key access patterns.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-85178. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart