Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-12795

Опубликовано: 21 июн. 2026
Источник: nvd
CVSS3: 7.3
CVSS2: 7.5
EPSS Низкий

Описание

A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Debug Flow. Executing a manipulation can lead to missing authentication. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:litellm:litellm:*:*:*:*:*:*:*:*
Версия до 1.82.2 (включая)

EPSS

Процентиль: 41%
0.00508
Низкий

7.3 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 7.3
redhat
около 2 месяцев назад

A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Debug Flow. Executing a manipulation can lead to missing authentication. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

CVSS3: 7.3
github
около 2 месяцев назад

A vulnerability was determined in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Debug Flow. Executing a manipulation can lead to missing authentication. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

EPSS

Процентиль: 41%
0.00508
Низкий

7.3 High

CVSS3

7.5 High

CVSS2

Дефекты

CWE-287