PyPI/litellm CVE-2026-35030: critical 9.1, EPSS 0.63%
LiteLLM: Authentication bypass via OIDC userinfo cache key collision
Action: Upgrade litellm to 1.83.0 or later.
pip install litellm==1.83.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.83.0 | - |
Fixed versions
| 1.83.0 |
Sources
- osv: PYSEC-2026-390
- nvd: CVE-2026-35030
- https://github.com/BerriAI/litellm/security/advisories/GHSA-jjhc-v7c2-5hh6
- https://github.com/BerriAI/litellm
- https://pypi.org/project/litellm
- https://github.com/advisories/GHSA-jjhc-v7c2-5hh6
CVE-2026-35030 · published · modified · JSON