CVE-2026-59822HIGH
BerriAI LiteLLM MCP authentication bypass (CVE-2026-59822) in CISA KEV
LiteLLM before 1.84.0 lets any fabricated Bearer token open an MCP session; exploited per CISA KEV, fix 1.84.0, rotate gateway secrets.
Updated 2026-11-09
Vendor hub
BerriAI vulnerabilities
Dossiers
Recent CISA KEV entries
| CVE | Product | Added to KEV | Status | Dossier |
|---|---|---|---|---|
| CVE-2026-59822 | BerriAI LiteLLM | 2026-09-02 | Active exploitation | Read → |
| CVE-2026-42271 | BerriAI LiteLLM | 2026-06-08 | Active exploitation | Planned |
| CVE-2026-42208 | BerriAI LiteLLM | 2026-05-08 | Active exploitation | Planned |