{"schema":"threatline.record/2","record":{"id":"CVE-2026-59822","aliases":["GHSA-7488-6r32-c95q","PYSEC-2026-3479"],"summary":"BerriAI LiteLLM Improper Authentication Vulnerability","details":"BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token.","categories":["Libraries & packages"],"product":"LiteLLM","vendor":"BerriAI","ecosystem":"PyPI","affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-59822","source_modified_at":"2026-09-03T03:56:05.174Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"litellm","vendor":"BerriAI","versions":[{"version":"< 1.84.0","status":"affected"}],"defaultStatus":null},{"source":"GitHub Advisory Database","source_url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95q","source_modified_at":"2026-07-07T16:13:38Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"pip","name":"litellm"},"range":"< 1.84.0"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-7488-6r32-c95q","source_modified_at":"2026-09-10T03:51:10.889726310Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"litellm","ecosystem":"PyPI","purl":"pkg:pypi/litellm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.0"}]}],"versions":["0.1.0","0.1.1","0.1.2","0.1.201","0.1.202","0.1.203","0.1.204","0.1.205","0.1.206","0.1.207","0.1.208","0.1.209","0.1.210","0.1.211","0.1.212","0.1.213","0.1.214","0.1.215","0.1.216","0.1.217","0.1.218","0.1.219","0.1.220","0.1.221","0.1.222","0.1.223","0.1.224","0.1.225","0.1.226","0.1.227","0.1.228","0.1.229","0.1.2291","0.1.230","0.1.231","0.1.232","0.1.233","0.1.234","0.1.235","0.1.236","0.1.237","0.1.238","0.1.3","0.1.31","0.1.32","0.1.330","0.1.331","0.1.34","0.1.341","0.1.343"]}],"fixed_versions":[{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-7488-6r32-c95q","source_modified_at":"2026-09-10T03:51:10.889726310Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"litellm","ecosystem":"PyPI","purl":"pkg:pypi/litellm"},"version":"1.84.0"}],"cvss":8.8,"severity":"High","kev":{"listed":true,"date_added":"2026-09-02","due_date":"2026-09-16","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.00836,"percentile":0.57323,"score_date":"2026-10-23"},"published_at":"2026-07-08T19:32:18.611Z","modified_at":"2026-09-10T03:51:10.889726310Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-59822","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-09-03T03:56:05.174Z"},{"source":"GitHub Advisory Database","url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95q","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-07-07T16:13:38Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-7488-6r32-c95q","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-09-10T03:51:10.889726310Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-59822","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","GitHub Advisory Database","OSV","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95q","tags":["x_refsource_CONFIRM"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59822","source":"CISA KEV"},{"source":"CVE List","url":"https://github.com/BerriAI/litellm/pull/26463","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/BerriAI/litellm/commit/73869f0faf7d11ee21adcb5f91b8c33a340b6c2c","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/BerriAI/litellm/releases/tag/v1.84.0","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://www.wiz.io/blog/ai-infrastructure-honeypot","tags":["third-party-advisory"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-59822","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"active","automatable":"yes","technical_impact":"partial","assessed_at":"2026-09-02T00:00:00+00:00"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-09-10T03:51:10.889726310Z","content_hash":"b42e6c805c72090e3cb1172f6707aa81531aa2e3d4076346e82c99c1348dfe99"}}