CVE-2026-12771

[CVE catalog]

Severity

Medium · CVSS 5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Published

Jun 21, 2026, 1:00:12 AM UTC

Source

[NVD] · [CVE record]

EPSS

0.43% · Oct 25, 2026

A flaw was found in BerriAI litellm. A remote attacker can exploit an improper authorization vulnerability within the M2M JWT Handler. This could allow unauthorized access, leading to a low impact on the confidentiality, integrity, and availability of affected resources. litellm: Litellm: Improper authorization vulnerability A flaw was found in BerriAI litellm versions through 1.82.2, where the M2M JWT authentication handler in the proxy auth module applies admin-level authorization to all routes without the route-type restrictions present in the OAuth2 code path. Red Hat products that ship litellm use it as a library dependency for LLM API calls and do not deploy the LiteLLM Enterprise proxy with JWT authentication enabled. The vulnerable proxy auth code path is not present or not in the execute path in any shipped product. Additionally, 8 of 10 affected products ship litellm versions above 1.82.2 where this flaw is fixed. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.