High severity7.3NVD Advisory· Published Jun 21, 2026· Updated Jun 24, 2026

CVE-2026-12795

Description

A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Debug Flow. Executing a manipulation can lead to missing authentication. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Berriai/Litellm2 versions
cpe:2.3:a:litellm:litellm:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:litellm:litellm:*:*:*:*:*:*:*:*range: <=1.82.2
- (no CPE)range: <=1.82.2
Pypi/Litellminferred
Range: <=1.82.2
Package: https://pypi.org/project/litellm

Patches

Vulnerability mechanics

References

gist.github.com/YLChen-007/9b13c75a3a73187a4082cc6df0b100d3nvdExploitThird Party Advisory
github.com/advisories/GHSA-j37q-q7p9-vpwmghsaADVISORY
vuldb.com/cve/CVE-2026-12795nvdThird Party AdvisoryVDB Entry
vuldb.com/submit/811286nvdThird Party AdvisoryExploitVDB Entry
vuldb.com/vuln/372557nvdThird Party AdvisoryVDB Entry
vuldb.com/vuln/372557/ctinvdPermissions RequiredVDB Entry
nvd.nist.gov/vuln/detail/CVE-2026-12795ghsa

News mentions

Litellm: Ten Vulnerabilities Including Auth Bypass and SSRF Disclosed Together
Vypr Intelligence · Jun 21, 2026

cvss	0.474
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000