CVE-2026-12772
BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration
- State
- Published
- Severity
- 5.3 Medium
- Published
- Jun 21, 2026
- Updated
- Jun 22, 2026
- Reserved
- Jun 20, 2026
Description
A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticate_user of the file litellm/proxy/auth/login_utils.py of the component PROXY_ADMIN database API Key Generator. Performing a manipulation results in session expiration. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 6.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 6.5 Medium | AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
- CWE-613 Session Expiration
Affected Products
| Product | Versions |
|---|---|
litellmBerriAI |
|
References
- VDB-372514 | BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expirationvdb-entrytechnical-description
- VDB-372514 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- CVE-2026-12772 | CVE Analysis and Reportthird-party-advisory
- Submit #811281 | litellm <= 1.82.2 Insufficient Session Expiration (CWE-613)third-party-advisory
- https://gist.github.com/YLChen-007/39ed709ce322431658a05b951e91f278exploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.