CVE-2026-12772

Katalog CVE

CVSS 6.3 · Medium EPSS 0,40%

Kerentanan Insufficient Session Expiration pada litellm. Skor CVSS 3.1 6.3 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticate_user of the file litellm/proxy/auth/login_utils.py of the component PROXY_ADMIN database API Key Generator. Performing a manipulation results in session expiration. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.

Rincian

Terbit di NVD

21 Juni 2026

Terakhir diubah

24 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.3 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-613: Insufficient Session Expiration

EPSS (30 hari)

0,40% peluang dieksploitasi; lebih tinggi dari 32,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/YLChen-007/39ed709ce322431658a05b951e91f278 exploit · advisory pihak ketiga
• https://vuldb.com/cve/CVE-2026-12772 advisory pihak ketiga · vdb entry
• https://vuldb.com/submit/811281 advisory pihak ketiga · exploit · vdb entry
• https://vuldb.com/vuln/372514 advisory pihak ketiga · vdb entry
• https://vuldb.com/vuln/372514/cti permissions required · vdb entry