CVE-2026-85178

33th percentile - higher than 33% of all known CVEs

Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails to validate the requester's organization against the vault key's organization identifier. Attackers with admin or owner privileges in any organization can retrieve decrypted upstream provider credentials for other tenants, including plaintext OpenAI, Anthropic, and Bedrock API keys.

The risk includes exposure of sensitive API credentials of other organizations, potentially leading to unauthorized use of external services, data breaches, and significant financial losses.

It is recommended to immediately upgrade Helicone to a patched version and implement organization verification in the GET /v1/vault/key/{providerKeyId} endpoint.