Attestkeep
Language: English
Sign up

Vulnerabilities / CVE-2026-12773

critical

CVE-2026-12773

litellm: BerriAI litellm: Improper authentication in MCP Proxy via UserAPIKeyAuth function

Published Modified CWE 287, 303
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.

Severity by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GHSA5.5CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Red Hat7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Red Hat (high), GHSA (medium).

Description

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Affected packages and fixed versions

SourcePackageFixed in
echo pip::Echo OSVlitellm1.84.0
minimosairflow-33.3.1-r0
pip::GitHub Security Advisory piplitellm1.84.0
seal pip::Seal Security Databaselitellm, seal-litellm1.80.11+sp999, 1.83.14+sp2p2
Show all 5 entries from 4 sources
SourcePackageFixed in
echo pip::Echo OSVlitellm1.84.0
minimosairflow-33.3.1-r0
pip::GitHub Security Advisory piplitellm1.84.0
seal pip::Seal Security Databaselitellm1.80.11+sp999, 1.83.14+sp2p2
seal pip::Seal Security Databaseseal-litellm1.80.11+sp999, 1.83.14+sp2p2

References

All 13 references

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.