Disclosed weakness · no CVE recorded

LiteLLM could authorize new gateway access after logout

LiteLLM · LiteLLM Proxy

First documented disclosure · Review checkpoint

Summary

Logging out of the browser did not always stop a former session from obtaining fresh MCP gateway access.

Severity and exploitation evidence

No CVSS score recorded in this review.

Exploitation not established: The original source establishes the weakness but does not report malicious exploitation.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The gateway did not consistently check whether the browser session was still active before issuing access.

Conditions required

A previous browser session has been revoked or expired, but its stored credential remains available.

Potential impact

MCP gateway authorization could continue after the operator expected it to end.

Affected versions and configurations

The affected behavior is documented. The full version range is not established.

Fix and mitigation status

1.109.0 lists this correction; other release lines may differ.

Practical next steps

Use a release containing this correction. Review gateway grants issued after session revocation.

Operating lesson

Verify session state again when granting a new credential.

Evidence and limits

The project describes the correction in the linked public changes and lists it in 1.109.0. No CVE assignment or complete affected range was established.

Sources