{"data":{"id":"73d45422-1393-4ae4-8177-49bde0732f13","title":"CVE-2026-42271: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before…","summary":"LiteLLM versions from 1.74.2 up to, but not including, 1.83.7 expose two endpoints, POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list, that accept a full MCP server configuration including the stdio transport's command, args and env fields. Any holder of a valid proxy API key, including low-privilege internal-user keys, can make these endpoints spawn an arbitrary command as a subprocess on the proxy host with the proxy process's privileges, because no role check gates them.","solution":"Fixed in 1.83.7.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-42271","publishedAt":"2026-05-08T04:16:21.820Z","cveId":"CVE-2026-42271","cweIds":["CWE-77","CWE-78"],"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["litellm@>= 1.74.2, < 1.83.7 (fixed: 1.83.7)"],"affectedPackageNames":["litellm"],"affectedPackageRefs":["pypi:litellm"],"affectedVendors":[],"affectedVendorsRaw":["LiteLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LiteLLM command execution through MCP test endpoints","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"active","epssScore":0.91445,"epssCheckedAt":"2026-11-10T12:15:59.096Z","kevDateAdded":"2026-06-08","advisoryAliases":["GHSA-v4p8-mg3p-g94g"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:46.414Z","patchAvailable":true,"disclosureDate":"2026-05-08T04:16:21.820Z","fixReleasedAt":"2026-04-13T17:34:58.360Z","daysToFix":-25,"fixCheckedAt":"2026-10-29T21:36:40.895Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"litellm","fixedVersion":"1.83.7","matchedVersion":"1.83.7","fixReleasedAt":"2026-04-13T17:34:58.360Z","daysToFix":-25,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:40.749Z"}]}}