LiteLLM's MCP Endpoint Trusted Any Bearer Token It Was Handed: One Header, Full Tool Access
CVE-2026-59822 lets an unauthenticated attacker open an authenticated LiteLLM MCP session with a fabricated Authorization header — the OAuth2 passthrough fallback replaced failed key validation with an empty auth object. CVSS v4 8.8, fixed in 1.84.0, on KEV with a Sep 16 due date.
High severity, 3 of 4. Patch at your next window. Real impact, real exposure.CVSS 8.8Exploited in the wildKEV due 16 SEP 2026CVE-2026-59822 +1
litellmai-gatewaymcp