5.3
Medium
CVE-2026-108574 A flaw has been found in BerriAI LiteLLM up to 1.95.0
Description
A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function ui_view_session_spend_logs of the file litellm/proxy/spend_tracking/spend_management_endpoints.py of the component Spend Tracking. Executing a manipulation of the argument session_id can lead to authorization bypass. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 1.96.0 can resolve this issue. This patch is called 722d9ffa4f6c5ae15702ab9ab2c5f6bf1688308b. The affected component should be upgraded.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| litellm 1.96 | earliest → < 1.96.0 | 1.96.0 |
| litellm | 1.95.0 | No fix stated |
| litellm | 1.94 | No fix stated |
| litellm | 1.93 | No fix stated |
| litellm | 1.92 | No fix stated |
| litellm | 1.91 | No fix stated |
| litellm | 1.90 | No fix stated |
| litellm | 1.89 | No fix stated |
| litellm | 1.88 | No fix stated |
Show the 88 other branches Hide the 88 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| litellm | 1.87 | No fix stated |
| litellm | 1.86 | No fix stated |
| litellm | 1.85 | No fix stated |
| litellm | 1.84 | No fix stated |
| litellm | 1.83 | No fix stated |
| litellm | 1.82 | No fix stated |
| litellm | 1.81 | No fix stated |
| litellm | 1.80 | No fix stated |
| litellm | 1.79 | No fix stated |
| litellm | 1.78 | No fix stated |
| litellm | 1.77 | No fix stated |
| litellm | 1.76 | No fix stated |
| litellm | 1.75 | No fix stated |
| litellm | 1.74 | No fix stated |
| litellm | 1.73 | No fix stated |
| litellm | 1.72 | No fix stated |
| litellm | 1.71 | No fix stated |
| litellm | 1.70 | No fix stated |
| litellm | 1.69 | No fix stated |
| litellm | 1.68 | No fix stated |
| litellm | 1.67 | No fix stated |
| litellm | 1.66 | No fix stated |
| litellm | 1.65 | No fix stated |
| litellm | 1.64 | No fix stated |
| litellm | 1.63 | No fix stated |
| litellm | 1.62 | No fix stated |
| litellm | 1.61 | No fix stated |
| litellm | 1.60 | No fix stated |
| litellm | 1.59 | No fix stated |
| litellm | 1.58 | No fix stated |
| litellm | 1.57 | No fix stated |
| litellm | 1.56 | No fix stated |
| litellm | 1.55 | No fix stated |
| litellm | 1.54 | No fix stated |
| litellm | 1.53 | No fix stated |
| litellm | 1.52 | No fix stated |
| litellm | 1.51 | No fix stated |
| litellm | 1.50 | No fix stated |
| litellm | 1.49 | No fix stated |
| litellm | 1.48 | No fix stated |
| litellm | 1.47 | No fix stated |
| litellm | 1.46 | No fix stated |
| litellm | 1.45 | No fix stated |
| litellm | 1.44 | No fix stated |
| litellm | 1.43 | No fix stated |
| litellm | 1.42 | No fix stated |
| litellm | 1.41 | No fix stated |
| litellm | 1.40 | No fix stated |
| litellm | 1.39 | No fix stated |
| litellm | 1.38 | No fix stated |
| litellm | 1.37 | No fix stated |
| litellm | 1.36 | No fix stated |
| litellm | 1.35 | No fix stated |
| litellm | 1.34 | No fix stated |
| litellm | 1.33 | No fix stated |
| litellm | 1.32 | No fix stated |
| litellm | 1.31 | No fix stated |
| litellm | 1.30 | No fix stated |
| litellm | 1.29 | No fix stated |
| litellm | 1.28 | No fix stated |
| litellm | 1.27 | No fix stated |
| litellm | 1.26 | No fix stated |
| litellm | 1.25 | No fix stated |
| litellm | 1.24 | No fix stated |
| litellm | 1.23 | No fix stated |
| litellm | 1.22 | No fix stated |
| litellm | 1.21 | No fix stated |
| litellm | 1.20 | No fix stated |
| litellm | 1.19 | No fix stated |
| litellm | 1.18 | No fix stated |
| litellm | 1.17 | No fix stated |
| litellm | 1.16 | No fix stated |
| litellm | 1.15 | No fix stated |
| litellm | 1.14 | No fix stated |
| litellm | 1.13 | No fix stated |
| litellm | 1.12 | No fix stated |
| litellm | 1.11 | No fix stated |
| litellm | 1.10 | No fix stated |
| litellm | 1.9 | No fix stated |
| litellm | 1.8 | No fix stated |
| litellm | 1.7 | No fix stated |
| litellm | 1.6 | No fix stated |
| litellm | 1.5 | No fix stated |
| litellm | 1.4 | No fix stated |
| litellm | 1.3 | No fix stated |
| litellm | 1.2 | No fix stated |
| litellm | 1.1 | No fix stated |
| litellm | 1.0 | No fix stated |
References
- VDB-416231 | BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization vuldb.com
- VDB-416231 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- CVE-2026-108574 | CVE Analysis and Report vuldb.com
- Submit #955441 | BerriAI LiteLLM Proxy 1.82.1 - 1.92.0 Access Control / IDOR vuldb.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of litellm
The 40 CVEs of litellm →
CVE-2026-114612
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
9.9
Critical
CVE-2026-108575
A vulnerability has been found in BerriAI LiteLLM up to 1.94.0
5.3
Medium
CVE-2026-93355
LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured…
7.6
High
CVE-2026-89032
BerriAI LiteLLM before 1.101.0-rc.1 contains a tenant isolation bypass vulnerability in the semantic cache layer that…
8.7
High