CVE-2026-59822
CRITICAL CISACVSS Score
N/A
Severity
CRITICAL
Source
CISA
Published
Sep 02, 2026
Description
BerriAI โ LiteLLM: BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token.