GitHub Advisoryadvisory · PyPI

GHSA-j37q-q7p9-vpwm LiteLLM: SSO Debug Flow Has Improper Authentication

MEDIUM Published 2026-06-21 Modified 2026-09-10 Official page ↗
Aliases
CVE-2026-12795
Ecosystem
PyPI
Packages
litellm
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-287
Reviewed
2026-09-10

Affected packages

• PyPI litellm: <= 1.82.2 (no fix yet)

Description

A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Debug Flow. Executing a manipulation can lead to missing authentication. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

Related

Alias · CVE (1)

  • CVE-2026-12795 A vulnerability was determined in BerriAI litellm up to 1.82.2. vulnerability

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References