### Check for existing issues

- [x] I have searched the existing issues and checked that my issue is not a duplicate.

### What happened?

[Snyk reports litellm](https://security.snyk.io/package/pip/litellm) 1.94.X/1.95.X/1.96.X all contain three known security vulnerabilities with publicly assigned CVEs. All three issues are direct dependencies and currently have no supported remediation path because no patched LiteLLM release is available.

Affected vulnerabilities:

CVE-2026-12772 – Insufficient Session Expiration (CWE-613), CVSS 7.1 CVE-2026-12795 – Missing Authentication for Critical Function (CWE-306), CVSS 6.9 CVE-2026-12796 – Insufficient Session Expiration (CWE-613), CVSS 5.3 CVE-2024-6825 - reported by fossa.com

Snyk reports that all three vulnerabilities have Proof-of-Concept exploits available and that there is currently no supported fix.

### What did you expect to happen? The project should use a version of LiteLLM that does not contain these known security vulnerabilities, or update the dependency once an upstream release containing fixes becomes available. If an upgrade is not yet possible, documenting the impact and any recommended mitigations would also be helpf…