CVE-2026-59822

HIGHCVSS 8.2Known Exploited

CISA Known Exploited Vulnerability

https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95q ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-59822

Remediation deadline: September 16, 2026

Description

BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token.

Timeline

Published:July 8th, 2026 8:16 PM

Last modified:September 3rd, 2026 1:05 PM

Added to KEV:September 2nd, 2026

CVSS Scoring

CVSS v3: 8.2 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Affected Software

From NVD CPE configuration data

Vendors

litellm

Products

litellm

Weaknesses (CWE)

CWE-287 CWE-306

References & Reports

Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute