Skip to content

Tag

#LiteLLM

1 article tagged #LiteLLM.

Title card for CVE-2026-59822 showing a fabricated Bearer token bypassing LiteLLM's MCP Streamable HTTP auth via an OAuth2 passthrough fallback that returns an empty UserAPIKeyAuth object

Cybersecurity/AI Infrastructure Security·Sep 5, 2026·5 min read

CVE-2026-59822: LiteLLM's Second MCP Auth Bypass

CVE-2026-59822 lets an attacker fake a Bearer token and skip LiteLLM's MCP auth entirely. Different bug from June's RCE chain, same exposed surface.

SecurityCybersecurityLiteLLM