CVE-2026-59822

CWE-287

High

74.5

RPS

Description

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallback path that replaced failed LiteLLM key validation with an empty UserAPIKeyAuth() object, allowing requests to reach MCP tooling without a valid LiteLLM key. This issue is fixed in version 1.84.0.

Source: NVD

CVSS: 8.2; High · v3.1
EPSS: 0.83%; Probability of exploitation in the next 30 days (FIRST)
CISA KEV: In CISA KEV since Sept 2026
Fix commit: Fix commit known; Sources: MoreFixes, FreshFixes
Weakness: CWE-287
Published: 8 Jul 2026; Last modified 3 Sept 2026

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2026-59822

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 7 Oct 2026, 05:16 UK time

CVE-2026-59822

Description

Signals

Get this score from the API