CVE-2026-59822

Named by 4 kept items in this workspace.

Search every workspace for CVE-2026-59822. It matches the name as written, so it can find other things that share it.

The items that name it 4

Top MCP security resources — October 2026
article2026-10-08
Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise
writeup2026-09-09
MCP authentication bypass via the MCP endpoint - an arbitrary Bearer token can create a valid session; confirmed exploitable across hundreds of Internet-facing instances. Fix released in v1.84.0. Added to CISA's Known Exploited Vulnerabilities catalog; observed exploited in the wild via Wiz honeypot
Inside 90 days of attacks on AI infrastructure
writeup2026-08-27
Authentication flaw in LiteLLM's MCP Gateway; OAuth2 header handling fails to reject invalid tokens, instead returning an empty UserAPIKeyAuth() object with no restrictions, granting full MCP access with any Bearer token.
CISA Adds Seven Known Exploited Vulnerabilities to Catalog | CISA
advisory

All cves in this workspace.