SECUFOCUSNOW
Home›CVE index›CVE-2026-35030
Review reviewCritical

CVE-2026-35030

BerriAI litellm, Red Hat Ansible Automation Platform 2.6, Red Hat OpenShift AI 2.25

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, when JWT authentication is enabled (enable_jwt_auth: true), the OIDC userinfo cache uses token[:20] as the cache key. JWT headers produced by the same signing algorithm generate identical first 20 characters. This configuration option is not enabled by default. Most instances are not affected. An unauthenticated attacker can craft a token whose first 20 characters match a legitimate user's cached token. On cache hit, the attacker inherits the legitimate user's identity and permissions. Thi...

CVSS
9.4
EPSS
0.49%
39.5% percentile
CISA KEV
Not listed
Published
2026.04.07
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.49%
Technical severityCVSS 9.4

Vulnerability overview

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, when JWT authentication is enabled (enable_jwt_auth: true), the OIDC userinfo cache uses token[:20] as the cache key. JWT headers produced by the same signing algorithm generate identical first 20 characters. This configuration option is not enabled by default. Most instances are not affected. An unauthenticated attacker can craft a token whose first 20 characters match a legitimate user's cached token. On cache hit, the attacker inherits the legitimate user's identity and permissions. Thi...

Affected product and versions

Product
BerriAI litellm, Red Hat Ansible Automation Platform 2.6, Red Hat OpenShift AI 2.25
Affected versions
>= < 1.83.0, < 1.83.0
Fixed versions
1.83.0

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that BerriAI litellm, Red Hat Ansible Automation Platform 2.6, Red Hat OpenShift AI 2.25 and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE
CWE-222, CWE-287
CVE-2026-35030 — BerriAI litellm, Red Hat Ansible Automation Platform 2.6, Red Hat OpenShift AI 2.25 | SECUFOCUS NOW