CVE-2026-35030 - Vulnerability Analysis

Overview

LiteLLM < 1.83.0 contains a broken access control vulnerability caused by using the first 20 characters of JWT tokens as cache keys in OIDC userinfo cache, letting unauthenticated attackers inherit legitimate user identities, exploit requires JWT/OIDC authentication enabled.

Severity & Score

Impact

Unauthenticated attackers can impersonate legitimate users, gaining their permissions and access.

Mitigation

Update to version 1.83.0 or later.

References

• https://github.com/BerriAI/litellm/security/advisories/GHSA-jjhc-v7c2-5hh6

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner