HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-59822 — LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) fo...

·Source: NIST NVD

Updated:

Executive Summary

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallback path that replaced failed LiteLLM key validation with an empty UserAPIKeyAuth() object, allowing requests to reach MCP tooling without a va

Analysis

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallback path that replaced failed LiteLLM key validation with an empty UserAPIKeyAuth() object, allowing requests to reach MCP tooling without a valid LiteLLM key. This issue is fixed in version 1.84.0. CVSS Score: 8.2. Published: 2026-07-08T20:16:57.683.

Indicators of Compromise (1)

CVE (1)
CVE-2026-59822
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 8, 2026. Verified by: NIST.

Related Threats

HIGHVulnerability

CISA KEV: BerriAI LiteLLM — BerriAI LiteLLM Improper Authentication Vulnerability

BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token.

CVE-2026-59822BerriAI LiteLLM
CISA KEV
CRITICALVulnerabilityNEW

UK Warns Its Critical Infrastructure Faces Grave Risk

Britain's new Labour-led government is making a concerted push to get ahead of the AI risks to its national networks and the industrial complex.

Dark Reading
MEDIUMVulnerability

Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs

A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at QiAnXin's XLab said this week. The backdoored web server executes commands that attackers send via web requests, and those requests never appear in its access logs. Installing it takes root access, so the attackers must already control the server.

The Hacker News