CVE-2026-12796

Publié : 21 juin 2026

Modifié : 21 juin 2026

Score CVSS

6.3

MEDIUM

Description détaillée

A vulnerability was identified in BerriAI litellm up to 1.82.2. This impacts the function get_redirect_response_from_openid of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Authentication Flow. The manipulation leads to session expiration. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://gist.github.com/YLChen-007/5fa8af12e1b183674d7ca96d852fb697 https://vuldb.com/cve/CVE-2026-12796 https://vuldb.com/submit/811287 https://vuldb.com/vuln/372558 https://vuldb.com/vuln/372558/cti

Dernières Vulnérabilités

CVE-2026-56397

SiYuan before v3.6.1 fails to sanitize package metadata and README content in the Bazaar marketplace, allowing malicious package authors to inject arbitrary HTML and JavaScript. Attackers can achieve remote code execution on any user browsing the Bazaar by embedding XSS payloads in package displayName, description, or README fields, exploiting Electron's nodeIntegration setting to execute OS commands.

VOIR DÉTAILS

CVE-2026-56396

phpMyFAQ before 4.1.4 contains missing authorization vulnerabilities in editUser() and updateUserRights() endpoints that allow authenticated administrators to escalate privileges. Non-SuperAdmin users with edit_user permission can set is_superadmin flag or grant arbitrary rights to escalate to SuperAdmin access.

VOIR DÉTAILS

CVE-2026-56395

VOIR DÉTAILS