GITHUBEXPLOIT 9.4 CRITICAL

Exploit for Improper Authentication in Litellm_870BAA59-CF95-5581-8FCA-FB8BCC6CD2A7

9.4 / 10
CRITICAL
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:N/SA:N

Description

CVE-2026-35030 — LiteLLM Authentication Bypass via OIDC Userinfo Cache Key Collision LiteLLM OIDC userinfo cache uses token:20 as the cache key. Two different JWTs signed with the same algorithm produce identical first 20 characters, allowing an...
Visit Original Source

Basic Information

ID 870BAA59-CF95-5581-8FCA-FB8BCC6CD2A7
Published May 19, 2026 at 12:13
Modified May 19, 2026 at 12:16

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.