Lucene search
+L

6 matches found

PyPA
PyPA
•added 2026/10/01 4:38 p.m.•14 views

BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens

A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function getredirectresponsefromopenid of the file litellm/proxy/managementendpoints/uisso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carri...

6.5CVSS6.2AI score0.0057EPSS
SaveExploits1References9Affected Software1
OSV
OSV
•added 2026/10/01 4:38 p.m.•9 views

PYSEC-2026-4076 BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens

A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function getredirectresponsefromopenid of the file litellm/proxy/managementendpoints/uisso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carri...

6.3CVSS6.2AI score0.0057EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•5 views

PT-2026-105831

A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get redirect response from openid of the file litellm/proxy/management endpoints/ui sso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be...

6.5CVSS6.2AI score0.0057EPSS
SaveExploits1References10
Snyk
Snyk
•added 2026/06/21 11:11 a.m.•18 views

Insufficient Session Expiration

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Insufficient Session Expiration in the getredirectresponsefromopenid function of the SSO Authentication Flow process. An attacker can cause premature session termination by...

6.5CVSS6.6AI score0.0057EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/06/21 9:00 a.m.•28 views

EUVD-2026-38155

A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function getredirectresponsefromopenid of the file litellm/proxy/managementendpoints/uisso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carri...

6.5CVSS6.2AI score0.0057EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/21 12:00 a.m.•7 views

CVE-2026-12796: Insufficient Session Expiration

A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function getredirectresponsefromopenid of the file litellm/proxy/managementendpoints/uisso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carri...

6.5CVSS6.2AI score0.0057EPSS
SaveExploits1References6
Rows per page
Query Builder