HIGHCVSS 8.2Actively exploited · CISA KEV since 2026-09-02Vulnerability
CVE-2026-59822
BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token.
Properties
- Vulnerability name
- BerriAI LiteLLM Improper Authentication Vulnerability
- Epss score
- 0.00836
- Last seen
- 2026-10-19T12:00:27+00:00
- Due date
- 2026-09-16
- Exploited euvd since
- 2026-09-02T00:00:00+00:00
- Date added
- 2026-09-02
- Source url
- https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
- Ghsa updated
- 2026-07-22T22:38:34Z
- Euvd base score version
- 4.0
- Score
- 8.2
- Euvd vendor
- berriai
- In Signal since
- initial import (Sep 2026)
- Euvd base score
- 8.8
- Is ghsa only
- false
- Vendor project
- BerriAI
- Content hash
- bc91e05ff09d584025f326191e96c8d15b586e12e5c8d7ed74c218e320f2b390
- Published at
- 2026-07-08T20:16:57.683
- Euvd updated
- 2026-09-03T03:56:05+00:00
- Last modified
- 2026-09-03T13:05:59.573
- Euvd epss pct
- 0.84
Related Entities (8)
HAS_WEAKNESS (2)
AFFECTS (1)
AFFECTS_PRODUCT (1)
DESCRIBES (1)
INVOLVES (1)
MENTIONED_IN (1)
VULNERABLE_TO (1)
Explore deeper with Ninja Signal's threat intelligence graph