https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 07:51:58 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-93355 <p>LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in the JWT authentication flow without verifying the email_verified claim. Attackers can present a token with an unverified email address matching a victim&#39;s account to inherit the victim&#39;s role, including proxy_admin privileges, and permanently overwrite the victim&#39;s stored identity binding to retain persistent unauthorized access to administrative endpoints exposing API keys and user management.</p> <p>LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in the JWT authentication flow without verifying the email_verified claim. Attackers can present a token with an unverified email address matching a victim&#39;s account to inherit the victim&#39;s role, including proxy_admin privileges, and permanently overwrite the victim&#39;s stored identity binding to retain persistent unauthorized access to administrative endpoints exposing API keys and user management.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-93355 https://vulnerability.circl.lu/vuln/ghsa-g83g-3c4g-cfm5 <p>LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in the JWT authentication flow without verifying the email_verified claim. Attackers can present a token with an unverified email address matching a victim&#39;s account to inherit the victim&#39;s role, including proxy_admin privileges, and permanently overwrite the victim&#39;s stored identity binding to retain persistent unauthorized access to administrative endpoints exposing API keys and user management.</p> <p>LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in the JWT authentication flow without verifying the email_verified claim. Attackers can present a token with an unverified email address matching a victim&#39;s account to inherit the victim&#39;s role, including proxy_admin privileges, and permanently overwrite the victim&#39;s stored identity binding to retain persistent unauthorized access to administrative endpoints exposing API keys and user management.</p> https://vulnerability.circl.lu/vuln/ghsa-g83g-3c4g-cfm5