---
id: CVE-2026-12771
aliases:
  - GHSA-qmf3-4767-5fg3
title: 'LiteLLM: M2M JWT Handler Has Improper Authorization'
summary: 'LiteLLM: M2M JWT Handler Has Improper Authorization'
severity: medium
cvss: 5
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L'
vendor: litellm
product: litellm
ecosystem: pip
affected:
  - litellm <= 1.82.2
published: '2026-06-21'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T20:00:39.609957796Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-qmf3-4767-5fg3'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-12771'
  - url: 'https://gist.github.com/YLChen-007/70e4e106527f74ddf17953ff0f6c248d'
  - url: 'https://github.com/BerriAI/litellm'
  - url: 'https://vuldb.com/cve/CVE-2026-12771'
  - url: 'https://vuldb.com/submit/811280'
  - url: 'https://vuldb.com/vuln/372513'
  - url: 'https://vuldb.com/vuln/372513/cti'
  - url: 'https://github.com/advisories/GHSA-qmf3-4767-5fg3'
tags:
  - osv
  - pip
  - ghsa
epss: 0.00431
epssPercentile: 0.36977
cwe:
  - CWE-266
  - CWE-285
ingestedAt: '2026-09-10T20:04:29.998Z'
---

## Overview

A vulnerability was identified in BerriAI litellm up to 1.82.2. This affects an unknown function of the file litellm/proxy/auth/user_api_key_auth.py of the component M2M JWT Handler. Such manipulation leads to improper authorization. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is reported as difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.

## Affected packages

- `litellm <= 1.82.2`

## Remediation

Refer to the advisory for the patched release.