CVE-2026-12795 | BerriAI litellm up to 1.82.2 SSO Debug Flow ui_sso.py json.dumps missing authentication

A vulnerability, which was classified as critical, was found in BerriAI litellm up to 1.82.2. This affects the function json.dumps of the file litellm/proxy/management_endpoints/ui_sso.py of the component SSO Debug Flow. Executing a manipulation can lead to missing authentication.

This vulnerability is handled as CVE-2026-12795. The attack can be executed remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure.