{"id":"CVE-2024-9606","aliases":["GHSA-g5pg-73fc-hjwq","PYSEC-2026-1548"],"title":"LiteLLM Reveals Portion of API Key via a Logging File","summary":"LiteLLM Reveals Portion of API Key via a Logging File","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","vendor":"litellm","product":"litellm","ecosystem":"pip","affected":["litellm < 1.44.12"],"patched":["litellm 1.44.12"],"published":"2025-03-20","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:49:48.563145603Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-g5pg-73fc-hjwq","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9606"},{"url":"https://github.com/berriai/litellm/commit/9094071c4782183e84f10630e2450be3db55509a"},{"url":"https://github.com/BerriAI/litellm"},{"url":"https://huntr.com/bounties/4a03796f-a8d4-4293-84ef-d3959456223a"}],"tags":["osv","pip"],"epss":0.00752,"epssPercentile":0.53068,"ingestedAt":"2026-07-08T18:25:49.234Z","slug":"CVE-2024-9606","body":"## Overview\n\nIn berriai/litellm before version 1.44.12, the `litellm/litellm_core_utils/litellm_logging.py` file contains a vulnerability where the API key masking code only masks the first 5 characters of the key. This results in the leakage of almost the entire API key in the logs, exposing a significant amount of the secret key. The issue affects version v1.44.9.\n\n## Affected packages\n\n- `litellm < 1.44.12`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `litellm 1.44.12`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}