PYSEC-2026-4076
BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2026-12796
- Alias
- GHSA-w2mh-qq9q-453x
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS_V4
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get_redirect_response_from_openid of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.
Paquets affectés
| Paquet | Versions |
|---|---|
| PyPI · litellm | introduced 0, last affected 1.82.2 |
Références
- https://nvd.nist.gov/vuln/detail/CVE-2026-12796 ADVISORY
- https://gist.github.com/YLChen-007/5fa8af12e1b183674d7ca96d852fb697 WEB
- https://github.com/BerriAI/litellm PACKAGE
- https://vuldb.com/cve/CVE-2026-12796 WEB
- https://vuldb.com/submit/811287 WEB
- https://vuldb.com/vuln/372558 WEB
- https://vuldb.com/vuln/372558/cti WEB
- https://pypi.org/project/litellm PACKAGE
- https://github.com/advisories/GHSA-w2mh-qq9q-453x ADVISORY
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — PyPA Advisory Database |