A AegiFlow
LOWCVSS 2.1EPSS 0.6%

CVE-2026-12796

BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens

Published
2026-06-21
Modified
2026-09-14
EPSS percentile
45%
Aliases
GHSA-w2mh-qq9q-453x
Sources
github-advisory

Summary

A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get_redirect_response_from_openid of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.

Affected packages

EcosystemPackageAffected versionsFixed versions
PyPIlitellm

Remediation: No patched version is listed by GitHub.

References

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.