Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:helicone:vaultmanager:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Authorization Bypass in Helicone VaultManager via Provider Key Retrieval

An authorization bypass vulnerability in Helicone's VaultManager allows authenticated users to exfiltrate plaintext provider API keys from other organizations due to missing access control checks.

VaultManager authorization-bypass credential-access api-security
1t 1c