The flaw in BerriAI litellm’s SSO authentication flow occurs in the get_redirect_response_from_openid function where an attacker can manipulate the OpenID redirect and force a user session to expire prematurely. This results in a loss of authenticated state, effectively denying the victim access to services that require continuous authentication. The weakness is identified as a session‑handling issue (CWE‑613).

The affected product is BerriAI’s litellm, with all releases up to and including version 1.82.2 identified as vulnerable. Any environment running these builds, particularly those that rely on the SSO authentication flow for user access, is at risk.

The CVSS score of 5.3 indicates moderate severity. The EPSS score is not available, so the likelihood of exploitation remains uncertain, but the description confirms that a public exploit is available and the attack can be performed remotely. The vulnerability is not listed in the CISA KEV catalog, indicating no known active exploitation in the wild at the time of this analysis.