Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-35030— LiteLLM has an authentication bypass via OIDC userinfo cache key collision

Quick assessment

Affected
BerriAI litellm
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

LiteLLM是Berri AI开源的一个应用程序。可以使用 OpenAI 格式调用所有 LLM API。 LiteLLM 1.83.0之前版本存在授权问题漏洞，该漏洞源于启用JWT身份验证时，OIDC用户信息缓存使用token[:20]作为缓存键，可能导致未经身份验证的攻击者制作前20个字符与合法用户缓存令牌匹配的令牌，从而继承其身份和权限。

AI Predicted 9.1 Difficulty: Moderate EPSS 0.88% · P58

Affected Version Matrix 1

VendorProduct Version RangeStatus
BerriAI litellm < 1.83.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-35030

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
LiteLLM has an authentication bypass via OIDC userinfo cache key collision
Source: CVE Program / CVE List V5
Vulnerability Description
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, when JWT authentication is enabled (enable_jwt_auth: true), the OIDC userinfo cache uses token[:20] as the cache key. JWT headers produced by the same signing algorithm generate identical first 20 characters. This configuration option is not enabled by default. Most instances are not affected. An unauthenticated attacker can craft a token whose first 20 characters match a legitimate user's cached token. On cache hit, the attacker inherits the legitimate user's identity and permissions. This affects deployments with JWT/OIDC authentication enabled. Fixed in v1.83.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
认证机制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
LiteLLM 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
LiteLLM是Berri AI开源的一个应用程序。可以使用 OpenAI 格式调用所有 LLM API。 LiteLLM 1.83.0之前版本存在授权问题漏洞，该漏洞源于启用JWT身份验证时，OIDC用户信息缓存使用token[:20]作为缓存键，可能导致未经身份验证的攻击者制作前20个字符与合法用户缓存令牌匹配的令牌，从而继承其身份和权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
BerriAI litellm < 1.83.0 -

II. Public POCs for CVE-2026-35030

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-35030

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same product: litellm
Same vendor: BerriAI
Same weakness: CWE-287

V. Comments for CVE-2026-35030

No comments yet

Leave a comment