HIGHVulnerability
Verified
Global

CISA KEV: BerriAI LiteLLM — BerriAI LiteLLM Improper Authentication Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token.

Analysis

BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token. Added to CISA Known Exploited Vulnerabilities catalog on 2026-09-02. Remediation due: 2026-09-16.

Indicators of Compromise (1)

CVE (1)
CVE-2026-59822
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Sep 2, 2026. Verified by: CISA.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-93467 — The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Un...

The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content.

CVE-2026-93467
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-85878 — Improper authorization in Azure Database for PostgreSQL allows an authorized att...

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network.

CVE-2026-85878
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-69843 — Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized att...

Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-69843
NIST NVD