PT-2026-30279 · Litellm · Litellm

Veria-Labs · Published 2026-04-03 · Updated 2026-04-17 · CVE-2026-35030

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions LiteLLM versions prior to 1.83.0

Description A critical authentication bypass can occur in LiteLLM when JWT authentication is enabled, due to an OIDC userinfo cache key collision. The OIDC userinfo cache uses the first 20 characters of the token as the cache key. JWT headers from the same signing algorithm produce identical first 20 characters, allowing an unauthenticated attacker to craft a token that matches a legitimate user's cached token. Upon a cache hit, the attacker can inherit the legitimate user's identity and permissions. This affects deployments with JWT/OIDC authentication enabled.

Recommendations Update to version 1.83.0 or later. Disable OIDC userinfo caching by setting the cache TTL to 0. Disable JWT authentication entirely.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-35030

ECHO-B229-8FDA-451C

GHSA-JJHC-V7C2-5HH6

Affected Products

Litellm

References · 9

• https://github.com/BerriAI/litellm/security/advisories/GHSA-jjhc-v7c2-5hh6 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jjhc-v7c2-5hh6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35030 · Security Note
• https://github.com/BerriAI/litellm · Note
• https://twitter.com/0dayPublishing/status/2041201650753306755 · Twitter Post
• https://twitter.com/armor1_ai/status/2044573636229820742 · Twitter Post
• https://twitter.com/pulsepatchio/status/2040440367711944815 · Twitter Post
• https://twitter.com/CVEnew/status/2041223969215279330 · Twitter Post
• https://twitter.com/CisoRaging77913/status/2045052624358006826 · Twitter Post