CVE-2026-108574

A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...

CVE-2026-108574 BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization

A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...

CVE-2026-108574

A flaw in BerriAI LiteLLM up to version 1.95.0 allows for an authorization bypass within the Spend Tracking component. The vulnerability exists in the ui_view_session_spend_logs function of the litellm/proxy/spend_tracking/spend_management_endpoints.py file, where manipulating the session_id argu...

EUVD-2026-96884

A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function uiviewsessionspendlogs of the file litellm/proxy/spendtracking/spendmanagementendpoints.py of the component Spend Tracking. Executing a manipulation of the argument sessionid can lead to authorization...