Threats Tagged 'ghsa-g83g-3c4g-cfm5'

LiteLLM in BerriAI has a weak authentication vulnerability that allows attackers with a valid JWT to impersonate any user by exploiting an email-based fallback lookup that does not verify the email_verified claim. This flaw enables attackers to inherit victim roles, including administrative privileges, and persistently overwrite identity bindings to maintain unauthorized access to sensitive endpoints.