{"data":{"id":"035082fb-ec82-431f-9432-785c462c8991","title":"CVE-2026-30623: LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The…","summary":"CVE-2026-30623 affects LiteLLM 1.18.10 in its MCP server creation functionality. Users can add MCP servers through a JSON configuration that sets arbitrary command and args values, which LiteLLM executes on the host without validation, allowing an attacker to run arbitrary operating system commands. Successful exploitation may result in remote code execution with the privileges of the LiteLLM process.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-30623","publishedAt":"2026-07-15T22:16:46.317Z","cveId":"CVE-2026-30623","cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LiteLLM","MCP server"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LiteLLM remote code execution through MCP server creation configuration","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.04997,"epssCheckedAt":"2026-10-14T18:05:59.406Z","kevDateAdded":null,"advisoryAliases":["GHSA-gw7c-8jfv-4mj2"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-10T03:46:36.334Z","patchAvailable":null,"disclosureDate":"2026-07-15T22:16:46.317Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}