CVE-2026-59822
⚡ CISA KEVPublished: 2026-07-08Modified: 2026-09-03Vendor: BerriAIProduct: LiteLLM
8.2
CVSS v3
—
EPSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
⚡ Added to KEV on 2026-09-02 · Federal agencies must remediate by 2026-09-16
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallback path that replaced failed LiteLLM key validation with an empty UserAPIKeyAuth() object, allowing requests to reach MCP tooling without a valid LiteLLM key. This issue is fixed in version 1.84.0.
💣 Public Exploits0
From Exploit-DB
No public exploits in Exploit-DB.
🔍 Sigma Detection Rules0
Rules tagged with this CVE
No Sigma rules tagged with this CVE.
🛠️ Patch Details0
Affected/fixed versions from threat intel reports
No specific version data extracted yet.
📰 Threat Intel Coverage0
Digest reports mentioning this CVE
No threat intel digest coverage found.
📎 References6
↗ https://github.com/BerriAI/litellm/commit/73869f0faf7d11ee21adcb5f91b8c33a340b6c2c↗ https://github.com/BerriAI/litellm/pull/26463↗ https://github.com/BerriAI/litellm/releases/tag/v1.84.0↗ https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95q↗ https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59822↗ https://www.wiz.io/blog/ai-infrastructure-honeypot