CVE-2026-12796: BerriAI litellm SSO Authentication Flow ui_sso.py get_redirect_response_from_openid session expiration
A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function getredirectresponsefromopenid of the file litellm/proxy/managementendpoints/uisso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-12796?
The severity of CVE-2026-12796 is medium, with a score of 6.3.
How do I fix CVE-2026-12796?
To fix CVE-2026-12796, update BerriAI litellm to version 1.82.3 or later.
What component is affected by CVE-2026-12796?
CVE-2026-12796 affects the SSO Authentication Flow in the get_redirect_response_from_openid function.
What type of attack does CVE-2026-12796 enable?
CVE-2026-12796 enables an attack that could manipulate the session expiration.
In which software is CVE-2026-12796 found?
CVE-2026-12796 is found in the BerriAI litellm software, specifically versions up to 1.82.2.