Skip to content

Back to the catalog

tenable.comadvisory

CVE-2026-12773

Tenable CVE entry for CVE-2026-12773, an improper authentication flaw in BerriAI LiteLLM up to 1.59.8. The vulnerable function is UserAPIKeyAuth in litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py in the MCP Proxy component. It is remotely exploitable, a public exploit exists, and scores are CVSS v3.1 9.8 Critical, CVSS v4.0 6.9 Medium and EPSS 0.01017.

TL;DR CVE-2026-12773: remote improper authentication in LiteLLM MCP Proxy (UserAPIKeyAuth) up to 1.59.8, public exploit, CVSS 9.8.
Open original ↗

Organisations named here

  • BerriAI
  • CWE-287

CVEs named here

  • CVE-2026-12773

Technologies named here

  • BerriAI litellm up to 1.59.8
  • BerriAI LiteLLM
  • LiteLLM
  • Model Context Protocol
  • Python
  • CVSS
  • EPSS

Techniques named here

  • Improper Authentication

Related in AI Security