Description
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallback path that replaced failed LiteLLM key validation with an empty UserAPIKeyAuth() object, allowing requests to reach MCP tooling without a valid LiteLLM key. This issue is fixed in version 1.84.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BerriAI | litellm | < 1.84.0 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
HORKimhab/CVE-2026-59822 ★ 0 · Sep 3, 2026
CVE-2026-59822 - Draft or TODO
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | litellm | < 1.84.0 | 1.84.0 | GHSA-7488-6r32-c95q |
Advisories 1
- WID-SEC-2026-2263 LiteLLM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 2, 2026