CyberRota Analysis
AI-GeneratedThe VaultManager.getDecryptedProviderKeyById() function in Helicone's API is vulnerable due to inadequate validation of the requester's organization, allowing attackers with admin or owner privileges to access decrypted provider credentials across different tenants. This flaw can lead to unauthorized retrieval of sensitive API keys, including those for OpenAI, Anthropic, and Bedrock, posing a significant risk of data exposure and misuse. Organizations utilizing Helicone's services, particularly those with multi-tenant environments, should prioritize immediate remediation to mitigate potential breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails to validate the requester's organization against the vault key's organization identifier. Attackers with admin or owner privileges in any organization can retrieve decrypted upstream provider credentials for other tenants, including plaintext OpenAI, Anthropic, and Bedrock API keys.