{"schema":"vulnpedia.research/1","cve":"CVE-2026-114612","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-7hp6-4w63-5g45","tags":["x_refsource_CONFIRM","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-7hp6-4w63-5g45"},{"source":"nvd","sourceId":"CVE-2026-114612","modified":"2026-10-23T19:42:24.553","url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-7hp6-4w63-5g45"},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-7hp6-4w63-5g45"}]},{"url":"https://github.com/BerriAI/litellm/commit/1d5fdc87fed66b49e1df8cf7d708ad93249eb7d0","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","url":"https://github.com/BerriAI/litellm/commit/1d5fdc87fed66b49e1df8cf7d708ad93249eb7d0"},{"source":"nvd","sourceId":"CVE-2026-114612","modified":"2026-10-23T19:42:24.553","url":"https://github.com/BerriAI/litellm/commit/1d5fdc87fed66b49e1df8cf7d708ad93249eb7d0"},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://github.com/BerriAI/litellm/commit/1d5fdc87fed66b49e1df8cf7d708ad93249eb7d0"}]},{"url":"https://github.com/BerriAI/litellm/commit/9161d7f9d6073603ba61ee4aa5e2c0ef5b37a81b","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","url":"https://github.com/BerriAI/litellm/commit/9161d7f9d6073603ba61ee4aa5e2c0ef5b37a81b"},{"source":"nvd","sourceId":"CVE-2026-114612","modified":"2026-10-23T19:42:24.553","url":"https://github.com/BerriAI/litellm/commit/9161d7f9d6073603ba61ee4aa5e2c0ef5b37a81b"},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://github.com/BerriAI/litellm/commit/9161d7f9d6073603ba61ee4aa5e2c0ef5b37a81b"}]},{"url":"https://github.com/BerriAI/litellm/commit/9fa1a641119dd0d4fe43e93622eae5f482ceb63f","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","url":"https://github.com/BerriAI/litellm/commit/9fa1a641119dd0d4fe43e93622eae5f482ceb63f"},{"source":"nvd","sourceId":"CVE-2026-114612","modified":"2026-10-23T19:42:24.553","url":"https://github.com/BerriAI/litellm/commit/9fa1a641119dd0d4fe43e93622eae5f482ceb63f"},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://github.com/BerriAI/litellm/commit/9fa1a641119dd0d4fe43e93622eae5f482ceb63f"}]},{"url":"https://github.com/BerriAI/litellm/commit/a80eacacee118fbed54e3d98f239d17a63fac818","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","url":"https://github.com/BerriAI/litellm/commit/a80eacacee118fbed54e3d98f239d17a63fac818"},{"source":"nvd","sourceId":"CVE-2026-114612","modified":"2026-10-23T19:42:24.553","url":"https://github.com/BerriAI/litellm/commit/a80eacacee118fbed54e3d98f239d17a63fac818"},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://github.com/BerriAI/litellm/commit/a80eacacee118fbed54e3d98f239d17a63fac818"}]},{"url":"https://github.com/BerriAI/litellm/commit/f7cd90f09e9716652b38daec9f0640cdf49d582b","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","url":"https://github.com/BerriAI/litellm/commit/f7cd90f09e9716652b38daec9f0640cdf49d582b"},{"source":"nvd","sourceId":"CVE-2026-114612","modified":"2026-10-23T19:42:24.553","url":"https://github.com/BerriAI/litellm/commit/f7cd90f09e9716652b38daec9f0640cdf49d582b"},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://github.com/BerriAI/litellm/commit/f7cd90f09e9716652b38daec9f0640cdf49d582b"}]},{"url":"https://github.com/BerriAI/litellm/releases/tag/v1.100.4","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","url":"https://github.com/BerriAI/litellm/releases/tag/v1.100.4"},{"source":"nvd","sourceId":"CVE-2026-114612","modified":"2026-10-23T19:42:24.553","url":"https://github.com/BerriAI/litellm/releases/tag/v1.100.4"},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://github.com/BerriAI/litellm/releases/tag/v1.100.4"}]},{"url":"https://github.com/BerriAI/litellm/releases/tag/v1.101.3","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","url":"https://github.com/BerriAI/litellm/releases/tag/v1.101.3"},{"source":"nvd","sourceId":"CVE-2026-114612","modified":"2026-10-23T19:42:24.553","url":"https://github.com/BerriAI/litellm/releases/tag/v1.101.3"},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://github.com/BerriAI/litellm/releases/tag/v1.101.3"}]},{"url":"https://github.com/BerriAI/litellm/releases/tag/v1.102.2","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","url":"https://github.com/BerriAI/litellm/releases/tag/v1.102.2"},{"source":"nvd","sourceId":"CVE-2026-114612","modified":"2026-10-23T19:42:24.553","url":"https://github.com/BerriAI/litellm/releases/tag/v1.102.2"},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://github.com/BerriAI/litellm/releases/tag/v1.102.2"}]},{"url":"https://github.com/BerriAI/litellm/releases/tag/v1.103.1","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","url":"https://github.com/BerriAI/litellm/releases/tag/v1.103.1"},{"source":"nvd","sourceId":"CVE-2026-114612","modified":"2026-10-23T19:42:24.553","url":"https://github.com/BerriAI/litellm/releases/tag/v1.103.1"},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://github.com/BerriAI/litellm/releases/tag/v1.103.1"}]},{"url":"https://github.com/BerriAI/litellm/releases/tag/v1.104.0-rc.2","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-22T18:01:52.768Z","url":"https://github.com/BerriAI/litellm/releases/tag/v1.104.0-rc.2"},{"source":"nvd","sourceId":"CVE-2026-114612","modified":"2026-10-23T19:42:24.553","url":"https://github.com/BerriAI/litellm/releases/tag/v1.104.0-rc.2"},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://github.com/BerriAI/litellm/releases/tag/v1.104.0-rc.2"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-114612","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-114612"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2559212","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2559212"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-114612","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-114612"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114612","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114612"}]},{"source":"euvd","sourceId":"EUVD-2026-108277","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108277","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-108277","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108277"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/Hunt-Benito/one-salt-to-forge-them-all-cve-2026-114612-forged-admin-session-in-litellm","source":"poc-in-github","sourceId":"CVE-2026-114612","modified":"2026-10-24T16:10:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-114612","url":"https://github.com/Hunt-Benito/one-salt-to-forge-them-all-cve-2026-114612-forged-admin-session-in-litellm"},{"source":"poc-in-github","sourceId":"CVE-2026-114612","modified":"2026-10-24T16:10:16Z","url":"https://github.com/Hunt-Benito/one-salt-to-forge-them-all-cve-2026-114612-forged-admin-session-in-litellm"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json","productId":"exploit_intelligence:exploit-intelligence/vulnerability-analysis-rhel9","product":"exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/vulnerability-analysis-rhel9?repository_url=registry.redhat.io/exploit-intelligence/vulnerability-analysis-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json"}]},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json","productId":"lightspeed_core:lightspeed-core/lightspeed-stack-rhel9","product":"lightspeed-core/lightspeed-stack-rhel9 as a component of Lightspeed Core","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/lightspeed-stack-rhel9?repository_url=registry.redhat.io/lightspeed-core/lightspeed-stack-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json"}]},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform-26/lightspeed-chatbot-rhel9","product":"ansible-automation-platform-26/lightspeed-chatbot-rhel9 as a component of Red Hat Ansible Automation Platform 2","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/lightspeed-chatbot-rhel9?repository_url=registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json"}]},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform-27/lightspeed-chatbot-rhel9","product":"ansible-automation-platform-27/lightspeed-chatbot-rhel9 as a component of Red Hat Ansible Automation Platform 2","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/lightspeed-chatbot-rhel9?repository_url=registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json"}]},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-llama-stack-core-rhel9","product":"rhoai/odh-llama-stack-core-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-llama-stack-core-rhel9?repository_url=registry.redhat.io/rhoai/odh-llama-stack-core-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json"}]},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9","product":"rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-mlflow-rhel9?repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json"}]},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cpu-py312-rhel9","product":"rhoai/odh-th-torch-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-th-torch-cpu-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th-torch-cpu-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json"}]},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9","product":"rhoai/odh-th-torch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-th-torch-cuda-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th-torch-cuda-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json"}]},{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9","product":"rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-trustyai-garak-lls-provider-dsp-rhel9?repository_url=registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-114612","modified":"2026-10-23T17:38:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-114612.json"}]}],"vendorCoverage":{"total":9,"shown":9,"omitted":0,"source":"redhat"}}