LiteLLM: SSO Debug Flow Has Improper Authentication

GHSA-j37q-q7p9-vpwm · CVE-2026-12795 · PYSEC-2026-4071 · 갱신 2026. 10. 2.

해야 할 일

아직 수정 버전이 없습니다. 원문의 우회 방법을 확인하고 노출 범위를 줄이세요.

영향 받는 패키지

생태계	패키지	수정 버전
PyPI	litellm	없음

원문

LiteLLM: SSO Debug Flow Has Improper Authentication

A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Debug Flow. Executing a manipulation can lead to missing authentication. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

출처

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-12795
WEBhttps://gist.github.com/YLChen-007/9b13c75a3a73187a4082cc6df0b100d3
PACKAGEhttps://github.com/BerriAI/litellm
WEBhttps://vuldb.com/cve/CVE-2026-12795
WEBhttps://vuldb.com/submit/811286
WEBhttps://vuldb.com/vuln/372557
WEBhttps://vuldb.com/vuln/372557/cti

오늘 목록으로

LiteLLM: SSO Debug Flow Has Improper Authentication (GHSA-j37q-q7p9-vpwm) · Sieve