PT-2026-56545 · Berriai · Litellm

Published 2026-07-08 · Updated 2026-07-08 · CVE-2026-59822

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions LiteLLM versions prior to 1.84.0

Description LiteLLM is a proxy server that functions as an AI Gateway for calling LLM APIs. The MCP Streamable HTTP endpoint allows an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallback path. This process replaces failed key validation with an empty UserAPIKeyAuth() object, enabling requests to reach MCP tooling without a valid LiteLLM key.

Recommendations Update to version 1.84.0.

Fix

Improper Authentication

Missing Authentication

Weakness Enumeration

CWE-287

CWE-306

Related Identifiers

CVE-2026-59822

Affected Products

Litellm

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-59822 · Security Note
• https://github.com/BerriAI/litellm/pull/26463 · Note
• https://github.com/BerriAI/litellm/commit/73869f0faf7d11ee21adcb5f91b8c33a340b6c2c · Note
• https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95q · Note
• https://github.com/BerriAI/litellm/releases/tag/v1.84.0 · Note
• https://twitter.com/KaitanSecurity/status/2074954179525673282 · Twitter Post