~ / search / GHSA-mf52-j94g-746m

GHSA-mf52-j94g-746m

LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration

Source: GitHub Advisory Database (reviewed) Low CVE-2026-12772

Packages

EcosystemPackageAffectedFixed in
PyPI litellm <= 1.82.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticate_user of the file litellm/proxy/auth/login_utils.py of the component PROXY_ADMIN database API Key Generator. Performing a manipulation results in session expiration. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.

References

External links from the advisory. They lead to third-party sites.