Dashboard / CVE-2026-12772

CVE-2026-12772

LOW
INFO Priority: 0.01 BB Relevance: 54/100
Published: 2026-06-21 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticate_user of the file litellm/proxy/auth/login_utils.py of the component PROXY_ADMIN database API Key Generator. Performing a manipulation results in session expiration. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
litellm litellm < 1.82.3

References & Advisories (5)

https://vuldb.com/cve/CVE-2026-12772
Third Party Advisory VDB Entry
https://vuldb.com/vuln/372514
Third Party Advisory VDB Entry
https://vuldb.com/submit/811281
Third Party Advisory Exploit VDB Entry
https://vuldb.com/vuln/372514/cti
Permissions Required VDB Entry

Bug Bounty Relevance

54 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

2.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.40%
Raw Score 0.004000
Percentile 34.2%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00400
2026-10-28
0.00400

Intelligence Sources

nvd ref →

External Links