Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get_redirect_response_from_openid of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-12796 A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get_redirect_response_from_openid of the file litellm/proxy/management_endpo… https://www.cve.org/CVERecord?id=CVE-2026-12796
Post summary
The post announces CVE-2026-12796 affecting BerriAI litellm ≤1.82.2, specifically the `get_redirect_response_from_openid` function, but offers no PoC, exploit or patch info.
CVE-2026-12796 Session Expiration Vulnerability in BerriAI litellm Up to 1.82.2 SSO Authentication https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-12796
Post summary
The post references CVE-2026-12796, indicating a session expiration flaw in BerriAI litellm SSO authentication up to version 1.82.2, but provides no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | litellm | litellm | - | - | - |