282 matches found
SUSE CVE-2026-108574
A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...
CVE-2026-108575
A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function getsecret of the file secretmanagers/main.py of the component Secret Resolution. The manipulation of the argument apikey leads to improper authorization. The attack can be initiated remotely. The exploit has...
CVE-2026-108574
A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...
CVE-2026-108575
A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function getsecret of the file secretmanagers/main.py of the component Secret Resolution. The manipulation of the argument apikey leads to improper authorization. The attack can be initiated remotely. The exploit has...
CVE-2026-108575
A vulnerability exists in BerriAI LiteLLM (up to version 1.94.0 ) within the Secret Resolution component. The flaw resides in the get_secret function located in the file secret_managers/main.py. Specifically, an attacker can manipulate the api_key argument to cause improper authorization , potent...
EUVD-2026-96885
A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function getsecret of the file secretmanagers/main.py of the component Secret Resolution. The manipulation of the argument apikey leads to improper authorization. The attack can be initiated remotely. The exploit has...
CVE-2026-108575 BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization
A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function getsecret of the file secretmanagers/main.py of the component Secret Resolution. The manipulation of the argument apikey leads to improper authorization. The attack can be initiated remotely. The exploit has...
CVE-2026-108575 BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization
A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function getsecret of the file secretmanagers/main.py of the component Secret Resolution. The manipulation of the argument apikey leads to improper authorization. The attack can be initiated remotely. The exploit has...
CVE-2026-108574
A flaw in BerriAI LiteLLM up to version 1.95.0 allows for an authorization bypass within the Spend Tracking component. The vulnerability exists in the ui_view_session_spend_logs function of the litellm/proxy/spend_tracking/spend_management_endpoints.py file, where manipulating the session_id argu...
CVE-2026-108574 BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization
A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...
CVE-2026-108574 BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization
A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...
CVE-2026-108574
A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...
EUVD-2026-96884
A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...
CVE-2026-108574 BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization
A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...
CVE-2026-108575: Improper Authorization
A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function getsecret of the file secretmanagers/main.py of the component Secret Resolution. The manipulation of the argument apikey leads to improper authorization. The attack can be initiated remotely. The exploit has...
PT-2026-110109
Name of the Vulnerable Software and Affected Versions BerriAI LiteLLM versions prior to 1.94.1 Description An issue exists in the Secret Resolution component within the get secret function of the secret managers/main.py file. Remote manipulation of the api key argument can lead to improper...
CVE-2026-108574: Authorization Bypass Through User-Controlled Key
A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...
PT-2026-110106
Name of the Vulnerable Software and Affected Versions BerriAI LiteLLM versions prior to 1.96.0 Description An authorization bypass exists in the Spend Tracking component within the ui view session spend logs function of the litellm/proxy/spend tracking/spend management endpoints.py file. A remote...
BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens
A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function getredirectresponsefromopenid of the file litellm/proxy/managementendpoints/uisso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carri...
PYSEC-2026-4076 BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens
A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function getredirectresponsefromopenid of the file litellm/proxy/managementendpoints/uisso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carri...