BerriAI LiteLLM up to 1.95.0 Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs session_id authorization

Summaryinfo

A vulnerability marked as problematic has been reported in BerriAI LiteLLM up to 1.95.0. This affects the function ui_view_session_spend_logs of the file litellm/proxy/spend_tracking/spend_management_endpoints.py of the component Spend Tracking. The manipulation of the argument session_id leads to authorization. This vulnerability is documented as CVE-2026-108574. The attack can be initiated remotely. Additionally, an exploit exists. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability was found in BerriAI LiteLLM up to 1.95.0. It has been rated as problematic. This issue affects the function ui_view_session_spend_logs of the file litellm/proxy/spend_tracking/spend_management_endpoints.py of the component Spend Tracking. The manipulation of the argument session_id with an unknown input leads to a authorization vulnerability. Using CWE to declare the problem leads to CWE-639. The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data. Impacted is confidentiality.

The identification of this vulnerability is CVE-2026-108574. The exploitation is known to be easy. The attack may be initiated remotely. Technical details as well as a public exploit are known.

It is declared as proof-of-concept.

Upgrading to version 1.96.0 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying the patch 722d9ffa4f6c5ae15702ab9ab2c5f6bf1688308b is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• BerriAI

Name

• LiteLLM

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29
• 1.30
• 1.31
• 1.32
• 1.33
• 1.34
• 1.35
• 1.36
• 1.37
• 1.38
• 1.39
• 1.40
• 1.41
• 1.42
• 1.43
• 1.44
• 1.45
• 1.46
• 1.47
• 1.48
• 1.49
• 1.50
• 1.51
• 1.52
• 1.53
• 1.54
• 1.55
• 1.56
• 1.57
• 1.58
• 1.59
• 1.60
• 1.61
• 1.62
• 1.63
• 1.64
• 1.65
• 1.66
• 1.67
• 1.68
• 1.69
• 1.70
• 1.71
• 1.72
• 1.73
• 1.74
• 1.75
• 1.76
• 1.77
• 1.78
• 1.79
• 1.80
• 1.81
• 1.82
• 1.83
• 1.84
• 1.85
• 1.86
• 1.87
• 1.88
• 1.89
• 1.90
• 1.91
• 1.92
• 1.93
• 1.94
• 1.95.0

License

• open-source

Website

• Product: https://github.com/BerriAI/litellm/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #955441: BerriAI LiteLLM Proxy 1.82.1 - 1.92.0 Access Control / IDOR (by Gabriel Alves)

Be aware that VulDB is the high quality source for vulnerability data.

Discussion