CVE-2026-59822

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallback path that replaced failed LiteLLM key validation with an empty UserAPIKeyAuth() object, allowing requests to reach MCP tooling without a valid LiteLLM key. This issue is fixed in version 1.84.0.

• CWE-287
• CWE-306

• https://github.com/BerriAI/litellm/commit/73869f0faf7d11ee21adcb5f91b8c33a340b6c2cPatch
• https://github.com/BerriAI/litellm/pull/26463Issue Tracking, Patch
• https://github.com/BerriAI/litellm/releases/tag/v1.84.0Product, Release Notes
• https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95qMitigation, Patch, Vendor Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59822US Government Resource
• https://www.wiz.io/blog/ai-infrastructure-honeypotThird Party Advisory

Published

Jul 8, 2026

Last Modified

Sep 3, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-59817Ghost is a Node.js content management system. From 6.27.0 be…5.3
• CVE-2026-59818etcd is a distributed key-value store for the data of a dist…8.1
• CVE-2026-59819LiteLLM is a proxy server (AI Gateway) to call LLM APIs in O…4.9
• CVE-2026-5982A vulnerability was found in D-Link DIR-605L 2.13B01. This v…8.8
• CVE-2026-59820LiteLLM is a proxy server (AI Gateway) to call LLM APIs in O…6.5
• CVE-2026-59821LiteLLM is a proxy server (AI Gateway) to call LLM APIs in O…7.2
• CVE-2026-59823LiteLLM is a proxy server (AI Gateway) to call LLM APIs in O…5.3
• CVE-2026-59825Mastodon is a free, open-source social network server based …7.4
• CVE-2026-59826Metabase is an open-source business intelligence and embedde…9.1
• CVE-2026-59827Metabase is an open-source business intelligence and embedde…8.8
• CVE-2026-59828Discourse is an open-source discussion platform. Prior to 20…5.3
• CVE-2026-59829Discourse is an open-source discussion platform. Prior to 20…4.3