{"id":"CVE-2026-12795","title":"litellm: BerriAI litellm: Missing authentication in SSO Debug Flow allows remote access. (CVE-2026-12795)","summary":"A flaw was found in BerriAI litellm. This vulnerability allows a remote attacker to bypass authentication within the SSO Debug Flow component by manipulating the `json.dumps` function. The successful exploitation of this flaw could lead to…","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvssSource":"vendor","cwe":["CWE-305","CWE-287"],"vendor":"Red Hat","product":"litellm","affected":["litellm <= 1.82.2"],"published":"2026-06-21","updated":"2026-10-16","sourceUpdated":"2026-10-16T11:15:29+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12795.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12795.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-12795"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491137"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-12795"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12795"},{"url":"https://gist.github.com/YLChen-007/9b13c75a3a73187a4082cc6df0b100d3"},{"url":"https://vuldb.com/cve/CVE-2026-12795"},{"url":"https://vuldb.com/submit/811286"},{"url":"https://vuldb.com/vuln/372557"},{"url":"https://vuldb.com/vuln/372557/cti"},{"url":"https://github.com/BerriAI/litellm"},{"url":"https://pypi.org/project/litellm"},{"url":"https://github.com/advisories/GHSA-j37q-q7p9-vpwm"}],"tags":["csaf","vex","red-hat","osv","pip","ghsa"],"epss":0.00795,"epssPercentile":0.56223,"aliases":["GHSA-j37q-q7p9-vpwm","PYSEC-2026-4071"],"ecosystem":"pip","ingestedAt":"2026-09-10T23:08:11.245Z","slug":"CVE-2026-12795","body":"## Overview\n\nA flaw was found in BerriAI litellm. This vulnerability allows a remote attacker to bypass authentication within the SSO Debug Flow component by manipulating the `json.dumps` function. The successful exploitation of this flaw could lead to unauthorized access and potential information disclosure.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Important · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12795.json)\n\n**litellm: BerriAI litellm: Missing authentication in SSO Debug Flow allows remote access.** — rated Important by Red Hat. Released 2026-06-21, updated 2026-10-16.\n\nNot affected:\n\n- Exploit Intelligence\n- Lightspeed Core\n- Red Hat Ansible Automation Platform 2\n- Red Hat OpenShift AI (RHOAI)\n\n## Remediation\n\nRefer to the advisory for fix availability.\n\n## Package advisory (CVE-2026-12795)\n\nAffected packages:\n\n- `litellm <= 1.82.2`\n\nSource: https://osv.dev/vulnerability/GHSA-j37q-q7p9-vpwm","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[{"seq":108720,"id":"CVE-2026-12795","ts":1789182839622,"field":"severity","old":"medium","new":"high"}]}