{"data":{"id":"127a3c50-f7c1-48e7-8a00-2ab47b9d3cc9","title":"CVE-2026-59822: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP…","summary":"CVE-2026-59822 affects LiteLLM versions prior to 1.84.0. An unauthenticated attacker could send a fabricated Authorization header to the MCP Streamable HTTP endpoint, triggering an OAuth2 passthrough fallback that replaces failed key validation with an empty UserAPIKeyAuth() object. This lets requests reach MCP tooling without a valid LiteLLM key. The GitHub-assigned CVSS 4.0 base score is 8.8 (HIGH), and CWE-287 and CWE-306 are listed.","solution":"Fixed in 1.84.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-59822","publishedAt":"2026-07-08T20:16:57.683Z","cveId":"CVE-2026-59822","cweIds":["CWE-287","CWE-306"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["litellm@< 1.84.0 (fixed: 1.84.0)"],"affectedPackageNames":["litellm"],"affectedPackageRefs":["pypi:litellm"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LiteLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LiteLLM authentication bypass through MCP Streamable HTTP endpoint","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"active","epssScore":0.00836,"epssCheckedAt":"2026-10-14T18:06:00.235Z","kevDateAdded":"2026-09-02","advisoryAliases":["GHSA-7488-6r32-c95q"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:46:54.879Z","patchAvailable":true,"disclosureDate":"2026-07-08T20:16:57.683Z","capecIds":["CAPEC-114","CAPEC-115"],"crossRefCount":2,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null}}