Riskcovery

CVE-2026-12773

BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication

State
Published
Severity
6.9 Medium
Published
Jun 21, 2026
Updated
Jul 15, 2026
Reserved
Jun 20, 2026

Read the record on cve.org

Description

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Scores

CVSSScoreVectorSource
4.06.9 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:PVulDB
3.17.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:RVulDB
3.07.3 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:RVulDB
2.07.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:URVulDB
3.17.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Lredhat-SADP

Weaknesses

  • CWE-287 Improper Authentication
  • CWE-303 Incorrect Implementation of Authentication Algorithm

Affected Products

ProductVersions
litellmBerriAI
  • 1.59.0Affected
  • 1.59.1Affected
  • 1.59.2Affected
  • 1.59.3Affected
  • 1.59.4Affected
  • 1.59.5Affected
  • 1.59.6Affected
  • 1.59.7Affected
  • 1.59.8Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.