Medium severity6.3NVD Advisory· Published Jun 21, 2026· Updated Jun 24, 2026
CVE-2026-12796
CVE-2026-12796
Description
A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get_redirect_response_from_openid of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
7- gist.github.com/YLChen-007/5fa8af12e1b183674d7ca96d852fb697nvdExploitThird Party Advisory
- github.com/advisories/GHSA-w2mh-qq9q-453xghsaADVISORY
- vuldb.com/cve/CVE-2026-12796nvdThird Party AdvisoryVDB Entry
- vuldb.com/submit/811287nvdThird Party AdvisoryExploitVDB Entry
- vuldb.com/vuln/372558nvdThird Party AdvisoryVDB Entry
- vuldb.com/vuln/372558/ctinvdPermissions RequiredVDB Entry
- nvd.nist.gov/vuln/detail/CVE-2026-12796ghsa
News mentions
1- Litellm: Ten Vulnerabilities Including Auth Bypass and SSRF Disclosed TogetherVypr Intelligence · Jun 21, 2026