LiteLLM: SSO Debug Flow Has Improper Authentication
LiteLLM
More for LiteLLM RSS feed for LiteLLM
- Severity
- High, CVSS 7.3
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Record
- CVE-2026-12795
- Affects
- LiteLLM
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- June 21, 2026
- Source last modified
- October 25, 2026
Description
A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Debug Flow. Executing a manipulation can lead to missing authentication. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
Description quoted from the NVD record.
Who is affected
Your organization is affected if it uses LiteLLM, made by BerriAI, a tool that sits between your apps and AI language model services and passes requests to them. This flaw affects versions up to and including 1.82.2. The problem is in the troubleshooting part of its single sign-on login feature, which lets people log in with one company account. Because this part does not properly check who is using it, an attacker could reach it over a network without logging in first. This flaw is rated High.
What to do
- Find out who runs LiteLLM for your organization: the person who installed it, or the IT provider or vendor who manages it for you.
- If you run it yourself, check which version is installed. Versions up to and including
1.82.2have this flaw. - No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release, and install it as soon as one is available.
- If an IT provider or vendor runs LiteLLM for you, send them this advisory and ask when the update will be done.
Analysis written from the source record as of October 25, 2026 and reviewed before publishing.