CVE Wiki Pixee · CVE intelligence
← All CVEs

CVE-2026-35030

Critical · CVSS 9.1

LiteLLM — Authentication Bypass via OIDC Userinfo Cache Key Collision (CWE-287, CWE-222)

CVSS
9.1
nvd
EPSS
—
KEV
No
Class
other
CWE-287, CWE-222

Description

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, when JWT authentication is enabled (enable_jwt_auth: true), the OIDC userinfo cache uses token[:20] as the cache key. JWT headers produced by the same signing algorithm generate identical first 20 characters. This configuration option is not enabled by default. Most instances are not affected. An unauthenticated attacker can craft a token whose first 20 characters match a legitimate user's cached token. On cache hit, the attacker inherits the legitimate user's identity and permissions. This affects deployments with JWT/OIDC authentication enabled. Fixed in v1.83.0.

Search profile — drives PoC discovery

Symbols enable_jwt_authtoken[:20]OIDC userinfo cacheJWT authenticationcache keyBerriAI/litellmGHSA-jjhc-v7c2-5hh6
Keywords CVE-2026-35030LiteLLM JWT authentication bypassLiteLLM OIDC cache collisionLiteLLM token[:20] cache keyLiteLLM enable_jwt_auth bypassLiteLLM AI Gateway auth bypassGHSA-jjhc-v7c2-5hh6 PoCLiteLLM 1.83.0 vulnerabilityLiteLLM proxy server authentication bypass
Versions: < 1.83.0

Ranked PoCs (1) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-06-30T06:00:22.000Z · profiled 2026-07-01T06:30:14.000Z