En bref
- CVE-2026-12796 est une vulnérabilité MOYENNE (CVSS 6.3) touchant litellm, litellm (litellm).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.57%, plus élevée que 47.2% des vulnérabilités.
- Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.
| Package | Affected versions | Patched versions |
|---|
| litellm PyPI | ≤ 1.82.2
| No fix yet |
| litellm | ≤ 1.82.2
| No fix yet |
Description
A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get_redirect_response_from_openid of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.
NVD description
A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get_redirect_response_from_openid of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free