CVE-2026-12799

BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization

View on CVE.org
Published Jun 21, 2026 CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Description
A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the function ui_view_users of the file litellm/proxy/management_endpoints/internal_user_endpoints.py of the component Incomplete Fix CVE-2025-0628. Such manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.

Analysis

AI-generated

Technical impact

The vulnerability is located in the ui_view_users function within litellm/proxy/management_endpoints/internal_user_endpoints.py. The function fails to perform proper authorization checks, enabling an attacker to retrieve or manipulate internal user data through the endpoint. Because this endpoint is exposed over the network, the attack can be launched remotely without requiring local privileges. The weakness is classified as improper authorization (CWE-266, CWE-285, and CWE-639).

Affected Systems

BerriAI:litellm, versions up to and including 1.82.2 are affected. No other versions beyond 1.82.2 have been reported to contain the vulnerability.

Risk and Exploitability

The CVSS score is 5.3, indicating moderate risk. EPSS data is unavailable, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote network access to the exposed internal management API. Because the flaw exists in application code, it can be exploited by sending crafted requests to the ui_view_users endpoint without needing elevated privileges on the host.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade BerriAI litellm to any release newer than 1.82.2 where the ui_view_users endpoint authorization is correctly enforced.
  • If an upgrade cannot be performed immediately, restrict external network traffic to the internal management API endpoints using firewall rules or network segmentation so that only trusted internal hosts can reach them.
  • In the interim, enforce additional role‑based access checks on the ui_view_users endpoint through custom middleware or application configuration to ensure only authorized users can invoke the function.

Generated by OpenCVE AI on June 23, 2026 at 13:35 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Github GHSA Github GHSA GHSA-m2v5-74w2-qhcj BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure
History
Type Values Removed Values Added
Weaknesses CWE-639
References
Metrics threat_severity

None

 threat_severity

Moderate
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Berriai
Berriai litellm
Vendors & Products Berriai
Berriai litellm
Type Values Removed Values Added
Description A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the function ui_view_users of the file litellm/proxy/management_endpoints/internal_user_endpoints.py of the component Incomplete Fix CVE-2025-0628. Such manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
Title BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization
First Time appeared Litellm
Litellm litellm
Weaknesses CWE-266
CWE-285
CPEs cpe:2.3:a:litellm:litellm:*:*:*:*:*:*:*:*
Vendors & Products Litellm
Litellm litellm
References
Metrics cvssV2_0

{'score': 4, 'vector': 'AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:C'}

cvssV3_0

{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C'}

cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P'}
Weaknesses
  • CWE-266

    Incorrect Privilege Assignment

  • CWE-285

    Improper Authorization

  • CWE-639

    Authorization Bypass Through User-Controlled Key

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Jun 22, 2026, 4:17 PM
Reserved
Jun 20, 2026, 5:12 PM

View source JSON

Updated
Jun 22, 2026, 4:15 PM

JSON

Status
Analyzed
Published
Jun 21, 2026, 10:16 AM
Modified
Oct 25, 2026, 11:10 PM

View source JSON

Severity
Moderate
Public date
Jun 21, 2026, 10:00 AM

View source Bugzilla JSON

Updated
Jun 23, 2026, 1:45 PM

JSON