Attestkeep
Idioma: Español
Registrarse

Vulnerabilidades / CVE-2026-12773

crítica

CVE-2026-12773

litellm: BerriAI litellm: Improper authentication in MCP Proxy via UserAPIKeyAuth function

Publicada Modificada CWE 287, 303
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.

Severidad por fuente

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GHSA5.5CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Red Hat7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

La etiqueta propia de Trivy es CRITICAL. Crítica según NVD. Más baja según Red Hat (alta), GHSA (media).

Descripción

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Paquetes afectados y versiones corregidas

FuentePaqueteCorregido en
echo pip::Echo OSVlitellm1.84.0
minimosairflow-33.3.1-r0
pip::GitHub Security Advisory piplitellm1.84.0
seal pip::Seal Security Databaselitellm, seal-litellm1.80.11+sp999, 1.83.14+sp2p2
Mostrar las 5 entradas de 4 fuentes
FuentePaqueteCorregido en
echo pip::Echo OSVlitellm1.84.0
minimosairflow-33.3.1-r0
pip::GitHub Security Advisory piplitellm1.84.0
seal pip::Seal Security Databaselitellm1.80.11+sp999, 1.83.14+sp2p2
seal pip::Seal Security Databaseseal-litellm1.80.11+sp999, 1.83.14+sp2p2

Referencias

Las 13 referencias

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.