Advisoriesby IbisLiteLLMGHSA-w2mh-qq9q-453x
BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens
No fix yet
A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get_redirect_response_from_openid of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| litellm PyPI | <= 1.82.2 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-613
- Also known as
- CVE-2026-12796, PYSEC-2026-4076
More LiteLLM advisories
All LiteLLM
BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec LoaderCVE-2026-12798no fix yetBerriAI litellm: UI User Enumeration leads to System-Wide Information DisclosureCVE-2026-12799no fix yetLiteLLM: improper authorizationCVE-2026-12797no fix yetLiteLLM: SSO Debug Flow Has Improper AuthenticationCVE-2026-12795no fix yetLiteLLM: MCP Proxy Has Improper AuthenticationCVE-2026-12773fixed in 1.84.0LiteLLM: Admin Key Handler Has Improper AuthorizationCVE-2026-12770no fix yet