---
id: CVE-2026-12795
title: >-
  litellm: BerriAI litellm: Missing authentication in SSO Debug Flow allows
  remote access. (CVE-2026-12795)
summary: >-
  A flaw was found in BerriAI litellm. This vulnerability allows a remote
  attacker to bypass authentication within the SSO Debug Flow component by
  manipulating the `json.dumps` function. The successful exploitation of this
  flaw could lead to…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'
cvssSource: vendor
cwe:
  - CWE-305
  - CWE-287
vendor: Red Hat
product: litellm
affected:
  - litellm <= 1.82.2
published: '2026-06-21'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T11:15:29+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12795.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12795.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-12795'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2491137'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-12795'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-12795'
  - url: 'https://gist.github.com/YLChen-007/9b13c75a3a73187a4082cc6df0b100d3'
  - url: 'https://vuldb.com/cve/CVE-2026-12795'
  - url: 'https://vuldb.com/submit/811286'
  - url: 'https://vuldb.com/vuln/372557'
  - url: 'https://vuldb.com/vuln/372557/cti'
  - url: 'https://github.com/BerriAI/litellm'
  - url: 'https://pypi.org/project/litellm'
  - url: 'https://github.com/advisories/GHSA-j37q-q7p9-vpwm'
tags:
  - csaf
  - vex
  - red-hat
  - osv
  - pip
  - ghsa
epss: 0.00795
epssPercentile: 0.56223
aliases:
  - GHSA-j37q-q7p9-vpwm
  - PYSEC-2026-4071
ecosystem: pip
ingestedAt: '2026-09-10T23:08:11.245Z'
---

## Overview

A flaw was found in BerriAI litellm. This vulnerability allows a remote attacker to bypass authentication within the SSO Debug Flow component by manipulating the `json.dumps` function. The successful exploitation of this flaw could lead to unauthorized access and potential information disclosure.

## Vendor advisories

- **Red Hat VEX** · Important · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12795.json)

**litellm: BerriAI litellm: Missing authentication in SSO Debug Flow allows remote access.** — rated Important by Red Hat. Released 2026-06-21, updated 2026-10-16.

Not affected:

- Exploit Intelligence
- Lightspeed Core
- Red Hat Ansible Automation Platform 2
- Red Hat OpenShift AI (RHOAI)

## Remediation

Refer to the advisory for fix availability.

## Package advisory (CVE-2026-12795)

Affected packages:

- `litellm <= 1.82.2`

Source: https://osv.dev/vulnerability/GHSA-j37q-q7p9-vpwm