CVE-2026-12796

Name of the Vulnerable Software and Affected Versions BerriAI litellm versions prior to 1.82.3

Description An issue exists in the SSO Authentication Flow component within the get redirect response from openid() function of the litellm/proxy/management endpoints/ui sso.py file. Remote manipulation of this function can lead to session expiration.

Recommendations Update to a version later than 1.82.2. As a temporary workaround, restrict access to the get redirect response from openid() function until the update is applied.