CVE-2026-59822 BerriAI Litellm
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough…
- CVSS
- 8.8 High
- EPSS
- 0.8%
- Percentile
- 58
- Published
- 2026-07-08
- Force
- 9 of 12
- Public PoC
- 1
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
On CISA’s exploited list
BerriAI LiteLLM Improper Authentication Vulnerability
- Added
- 2026-09-02
- Federal patch deadline
- 2026-09-16
- Ransomware use
- not known