Description
A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function ui_view_session_spend_logs of the file litellm/proxy/spend_tracking/spend_management_endpoints.py of the component Spend Tracking. Executing a manipulation of the argument session_id can lead to authorization bypass. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 1.96.0 can resolve this issue. This patch is called 722d9ffa4f6c5ae15702ab9ab2c5f6bf1688308b. The affected component should be upgraded.
Published: 2026-10-11
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Authorization Bypass
Action: Apply Patch
AI Analysis

Impact

A flaw in BerriAI LiteLLM up to version 1.95.0 allows an attacker to manipulate the session_id argument in the ui_view_session_spend_logs endpoint, bypassing the implemented authorization checks. This enables the attacker to view spend logs for sessions they are not entitled to, exposing potentially sensitive usage information and violating data confidentiality. The weakness is rooted in improper authorization controls (CWE-285) and improper handling of administrative privileges (CWE-639).

Affected Systems

BerriAI LiteLLM, versions prior to 1.96.0. The vulnerability is located in the Spend Tracking component, specifically the spend_management_endpoints.py file.

Risk and Exploitability

The CVSS score of 5.3 indicates a medium severity. No EPSS score is currently available, and the vulnerability is not listed in CISA’s KEV catalog. Nevertheless, the attack can be launched remotely and published exploits exist, meaning the risk of real-world exploitation is significant, especially for deployments exposing the endpoint without additional safeguards.

Generated by OpenCVE AI on October 11, 2026 at 14:02 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade BerriAI LiteLLM to version 1.96.0 or newer where the issue is resolved.
  • If an upgrade cannot be performed immediately, restrict external access to the ui_view_session_spend_logs endpoint via firewall or reverse‑proxy rules to limit exposure to authenticated users only.
  • Continuously monitor for signs of exploitation and keep the vendor’s advisory list up‑to‑date to apply future fixes as they become available.

Generated by OpenCVE AI on October 11, 2026 at 14:02 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 14 Oct 2026 00:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Tue, 13 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sun, 11 Oct 2026 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Berriai
Berriai litellm
Vendors & Products Berriai
Berriai litellm

Sun, 11 Oct 2026 12:00:00 +0000

Type Values Removed Values Added
Description A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function ui_view_session_spend_logs of the file litellm/proxy/spend_tracking/spend_management_endpoints.py of the component Spend Tracking. Executing a manipulation of the argument session_id can lead to authorization bypass. It is possible to launch the attack remotely. The exploit has been published and may be used. Upgrading to version 1.96.0 can resolve this issue. This patch is called 722d9ffa4f6c5ae15702ab9ab2c5f6bf1688308b. The affected component should be upgraded.
Title BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_spend_logs authorization
First Time appeared Litellm
Litellm litellm
Weaknesses CWE-285
CWE-639
CPEs cpe:2.3:a:litellm:litellm:*:*:*:*:*:*:*:*
Vendors & Products Litellm
Litellm litellm
References
Metrics cvssV2_0

{'score': 4, 'vector': 'AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:OF/RC:C'}

cvssV3_0

{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Berriai Litellm
Litellm Litellm
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-13T13:07:44.831Z

Reserved: 2026-10-10T15:37:46.507Z

Link: CVE-2026-108574

cve-icon Vulnrichment

Updated: 2026-10-13T13:07:39.012Z

cve-icon NVD

Status : Deferred

Published: 2026-10-11T12:16:52.990

Modified: 2026-10-13T13:29:12.567

Link: CVE-2026-108574

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-10-11T11:45:13Z

Links: CVE-2026-108574 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-11T17:45:07Z

Weaknesses
  • CWE-285

    Improper Authorization

  • CWE-639

    Authorization Bypass Through User-Controlled Key