PT-2026-51210 · Berriai · Litellm

Eric-C · Published 2026-06-21 · Updated 2026-06-21 · CVE-2026-12796

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BerriAI litellm versions prior to 1.82.3

Description An issue exists in the SSO Authentication Flow component within the get redirect response from openid() function of the litellm/proxy/management endpoints/ui sso.py file. Remote manipulation of this function can lead to session expiration.

Recommendations Update to a version later than 1.82.2. As a temporary workaround, restrict access to the get redirect response from openid() function until the update is applied.

Exploit

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2026-12796

Affected Products

Litellm

References · 8

• 🔥 https://gist.github.com/YLChen-007/5fa8af12e1b183674d7ca96d852fb697 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-12796 · Security Note
• https://vuldb.com/vuln/372558 · Note
• https://vuldb.com/submit/811287 · Note
• https://twitter.com/VulmonFeeds/status/2068654494569709909 · Twitter Post
• https://vuldb.com/vuln/372558/cti · Note
• https://vuldb.com/cve/CVE-2026-12796 · Note
• https://twitter.com/CVEnew/status/2068694523090551198 · Twitter Post