CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2026-07-08
LiteLLM MCP Streamable Endpoint Authentication Bypass Vulnerability (CVE-2026-59822)
[Affected Scope] LiteLLM proxy server and AI Gateway environments running versions prior to 1.84.0
[Impact] Unauthenticated attackers can bypass API key validation using a fabricated Authorization header, gaining unauthorized access to internal MCP tools and LLM APIs.
[Mitigation] Immediately upgrade the LiteLLM package to version 1.84.0 or higher.