CVE-2026-108574

A flaw was found in LiteLLM. A remote attacker can bypass authorization controls by manipulating the session identifier sessionid parameter in the spend tracking interface. This flaw allows an attacker to view spend tracking logs and usage metrics associated with other user sessions without prope...