Vulnerability PYSEC-2026-4076
Medium Risk
MEDIUM RISK
CVSS Score: 6.3
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
29 days ago
October 01, 2026 at 04:38 PM UTC
BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens
0.1.0 - 1.82.2
0.1.0 - 1.82.2
Summary
BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens
Details
A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get_redirect_response_from_openid of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
3 days ago
LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`
0.1.0 - 1.95.0rc3 GHSA-g5ff-637f-6q2m
0.1.0 - 1.95.0rc3 GHSA-g5ff-637f-6q2m
Medium Risk
3 days ago
LiteLLM vulnerable to reflected XSS in /sso/debug/callback
1.65.5 - 1.85.0rc2 GHSA-hhww-mrg2-969h
1.65.5 - 1.85.0rc2 GHSA-hhww-mrg2-969h
Critical
3 days ago
LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
1.91.0 - 1.100.3 and 1.101.0 - 1.101.2 and 1.102.0 - 1.102.1 and 1.103.0 and 1.104.0rc1 GHSA-7hp6-4w63-5g45
1.91.0 - 1.100.3 and 1.101.0 - 1.101.2 and 1.102.0 - 1.102.1 and 1.103.0 and 1.104.0rc1 GHSA-7hp6-4w63-5g45
Medium Risk
29 days ago
LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters
0.1.0 - 1.88.5 and 1.89.0 - 1.89.6 and 1.90.0 - 1.90.6 and 1.91.0 - 1.91.4 and 1.92.0 - 1.92.1 and 1.93.0 - 1.93.1 and 1.94.0 - 1.94.2 and 1.95.0 and 1.96.0 PYSEC-2026-4066
0.1.0 - 1.88.5 and 1.89.0 - 1.89.6 and 1.90.0 - 1.90.6 and 1.91.0 - 1.91.4 and 1.92.0 - 1.92.1 and 1.93.0 - 1.93.1 and 1.94.0 - 1.94.2 and 1.95.0 and 1.96.0 PYSEC-2026-4066
Unknown
29 days ago
LiteLLM Proxy has server-side request forgery via the `user_config` request parameter
0.1.0 - 1.83.8 PYSEC-2026-4070
0.1.0 - 1.83.8 PYSEC-2026-4070
Impacted packages
Timeline
Published
29 days ago
October 01, 2026 at 04:38 PM UTC
Last Modified
29 days ago
October 01, 2026 at 05:45 PM UTC