Description
A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| BerriAI | litellm | 1.59.0; 1.59.1; 1.59.2; 1.59.3; 1.59.4; 1.59.5; 1.59.6; 1.59.7; 1.59.8 |
| Red Hat | Exploit Intelligence | — |
| Red Hat | Red Hat Ansible Automation Platform 2 | — |
| Red Hat | Red Hat Ansible Automation Platform 2 | — |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — |
References
- https://gist.github.com/YLChen-007/3cfaad10a69d7a15e4d4d458cb53309eExploit, Third Party Advisory
- https://vuldb.com/cve/CVE-2026-12773Third Party Advisory, VDB Entry
- https://vuldb.com/submit/811282Exploit, Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/372515Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/372515/ctiPermissions Required, VDB Entry
- https://access.redhat.com/security/cve/CVE-2026-12773
- https://bugzilla.redhat.com/show_bug.cgi?id=2491112
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12773.json
- https://vuldb.com/submit/811282Exploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Jun 21, 2026
- Last modified
- Oct 25, 2026
- NVD status
- Modified