9.4
/ 10
CRITICAL
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:N/SA:N
Description
CVE-2026-35030 — LiteLLM Authentication Bypass via OIDC Userinfo Cache Key Collision LiteLLM OIDC userinfo cache uses token:20 as the cache key. Two different JWTs signed with the same algorithm produce identical first 20 characters, allowing an...
Basic Information
ID
870BAA59-CF95-5581-8FCA-FB8BCC6CD2A7
Published
May 19, 2026 at 12:13
Modified
May 19, 2026 at 12:16