CVE-2026-108574: BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization
A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization bypass. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 1.96.0 can resolve this issue. This patch is called 722d9ffa4f6c5ae15702ab9ab2c5f6bf1688308b. The affected component should be upgraded.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
BerriAI LiteLLMto a version that resolves this vulnerability.Fixed in 1.96.0Patch 722d9ffa4f6c5ae15702ab9ab2c5f6bf1688308b
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker with low privileges can exploit the authorization bypass by manipulating the session_id argument. No user interaction is required.
Which deployments are affected?
BerriAI LiteLLM versions up to and including 1.95.0 are affected where the Spend Tracking component and its session spend-log viewing functionality are present.
What is the impact of successful exploitation?
The vulnerability can expose confidential information through unauthorized access to session spend logs. The available data does not indicate integrity or availability impact.
What should be done to remediate the issue?
Upgrade LiteLLM to version 1.96.0 or later. The remediation is associated with patch 722d9ffa4f6c5ae15702ab9ab2c5f6bf1688308b.