High 7.3Published Jun 20, 2026

CVE-2026-12773BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication

Updated under an hour ago (Oct 27, 2026, 12:00 PM ET)

Does this affect you?

It affects BerriAI litellm and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for BerriAI litellm

Exploited in the last 30 days

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

CVSS: 7.3 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
Weakness (CWE): CWE-287, CWE-303
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulDB
NVD analysis: Modified
Record last updated: Jul 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

BerriAI litellm litellm:litellm	1.59.0; 1.59.1; 1.59.2; 1.59.3; 1.59.4; 1.59.5; 1.59.6; 1.59.7; and 1 more ranges	CNA record
Red Hat Exploit Intelligence redhat:exploit_intelligence	0	CISA ADP
Red Hat Red Hat Ansible Automation Platform 2 redhat:ansible_automation_platform	2	CISA ADP
Red Hat Red Hat OpenShift AI (RHOAI) redhat:openshift_ai	Versions not stated	CISA ADP
litellm litellm litellm:litellm	before 1.59.9	NVD

References

References

https://vuldb.com/vuln/372515	vdb-entry, technical-description, third-party-advisory
https://vuldb.com/vuln/372515/cti	signature, permissions-required, vdb-entry
https://vuldb.com/cve/CVE-2026-12773	third-party-advisory, vdb-entry
https://vuldb.com/submit/811282	third-party-advisory, exploit, vdb-entry
https://gist.github.com/YLChen-007/3cfaad10a69d7a15e4d4d458cb53309e	exploit, third-party-advisory
https://access.redhat.com/security/cve/CVE-2026-12773
https://bugzilla.redhat.com/show_bug.cgi?id=2491112
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12773.json

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.