[Module-request] CVE-2026-59822 (Authentication Bypass in LiteLLM)
Open
@Franc-Zar is already working on this.
Since Sep 9, 2026.
- Dominant language
- Python
- Stars
- 5.6k
- Forks
- 1.2k
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 16
Description
Description
Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallback path that replaced failed LiteLLM key validation with an empty UserAPIKeyAuth() object, allowing requests to reach MCP tooling without a valid LiteLLM key. This issue is fixed in version 1.84.0.
References
- https://nvd.nist.gov/vuln/detail/cve-2026-59822
- https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95q
Added to CISA KEV catalog on 2026-09-02, high severity (CVSS 4.0 score 8.8)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.