GHSA-v9h7-jj4g-f862: llm API Key Leak Vulnerability
LLM version 0.37.2 fixes security advisories where API keys could be accidentally sent to alternative providers due to missing keys or specific model options. The maintainer released a patched version to resolve the issues.
why this severityDisclosed vulnerability with a vendor fix and no active exploitation reported.
- fix status
- Patched
- affected
- llm < 0.37.2
- fixed in
- llm 0.37.2
- first report
- 11 Nov 2026
- last update
- 11 Nov 2026
What to do
Update to llm 0.37.2.
Timeline · 1
- 11 Nov 2026llm 0.37.2
Sources · 1
News and write-ups
- 2026-11-11llm 0.37.2Simon Willison · simonwillison.net/2026/Nov/11/llm
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- Attack on AI
- categories
- Infrastructure vulnerability
- severity
- 2 · Disclosed vulnerability
- fix status
- Patched
- targets
- Framework / tooling
- owasp llm top 10
- LLM03:2025 Supply Chain
- mitre atlas
- no technique for these categories
- dates
- happened 11 Nov 2026 · first reported 11 Nov 2026
- origin
- News & research feeds
- record
- confidence 0.90 · created 2026-11-11 18:41Z · updated 2026-11-11 18:41Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# GHSA-v9h7-jj4g-f862: llm API Key Leak Vulnerability https://gcdradar.vercel.app/incidents/ghsa-v9h7-jj4g-f862-llm-api-key-leak-vulnerability · AIR-2026-1908 · live - Lane: Patch now - Severity: 2 (Disclosed vulnerability): Disclosed vulnerability with a vendor fix and no active exploitation reported. - Fix status: Patched - First reported: 2026-11-11 - AI role: Attack on AI ## Summary LLM version 0.37.2 fixes security advisories where API keys could be accidentally sent to alternative providers due to missing keys or specific model options. The maintainer released a patched version to resolve the issues. ## What to do Update to llm 0.37.2. ## Affected and fixed versions - Affected: llm < 0.37.2 - Fixed in: llm 0.37.2 ## Latest updates - 2026-11-11: llm 0.37.2 (https://simonwillison.net/2026/Nov/11/llm) ## Sources - 2026-11-11 Simon Willison: llm 0.37.2 https://simonwillison.net/2026/Nov/11/llm Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closed6.3Flowise CVE-2026-127214: Flowise server-side request forgery vulnerability
Patch now · Disclosed · since 13 Nov 2026 · CVE-2026-127214
AI - closed6.9vLLM CVE-2026-126395: vLLM information disclosure vulnerability in sanitize_message()
Patch now · Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126395
AI - closed7.1vLLM CVE-2026-126399: vLLM resource exhaustion vulnerability via video frame limits bypass
Patch now · Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126399
AI - closed8.2vLLM CVE-2026-126398: vLLM reachable assertion vulnerability in GPUModelRunner._init_xdrope_positions
Patch now · Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126398
AI - closed6.9vLLM CVE-2026-126394: vLLM resource exhaustion vulnerability in OpenCVDynamicOpenPanguVideoBackend
Patch now · Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126394
AI - closed8.7vLLM CVE-2026-126397: vLLM quadratic CPU work vulnerability in Cohere2 Vision multimodal preprocessing
Patch now · Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126397
AI