HIGH

CVE-2026-59822

Litellm Litellm 2026-07-08 CVSS v3.1

CVSS

8.2

KEV

Description

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallback path that replaced failed LiteLLM key validation with an empty UserAPIKeyAuth() object, allowing requests to reach MCP tooling without a valid LiteLLM key. This issue is fixed in version 1.84.0.

Summary dbcve.org

LiteLLM's MCP Streamable HTTP endpoint prior to 1.84.0 contains an authentication bypass vulnerability where a fabricated Authorization header triggers an OAuth2 passthrough fallback that replaces failed key validation with an empty UserAPIKeyAuth() object, allowing unauthenticated access to MCP tooling.

Mitigation

Upgrade LiteLLM to version 1.84.0 or later to remediate the authentication bypass in the MCP Streamable HTTP endpoint.

Patch Commit

Weakness (CWE)

CWE-287 Improper Authentication

CWE-306 Missing Authentication

EPSS Score

0.87%

Probability of exploitation in next 30 days

57.3th percentile

References

https://github.com/BerriAI/litellm/commit/73869f0faf7d11ee21adcb5f91b8c33a340b6c2c Patch https://github.com/BerriAI/litellm/pull/26463 Issue Tracking, Patch https://github.com/BerriAI/litellm/releases/tag/v1.84.0 Product, Release Notes https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95q Mitigation, Patch, Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59822 US Government Resource https://www.wiz.io/blog/ai-infrastructure-honeypot Third Party Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE