LiteLLM < 1.84.0 Improper Authentication Vulnerability (GHSA-7488-6r32-c95q)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(364361);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/10/09");

  script_cve_id("CVE-2026-59822");
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2026/09/16");

  script_name(english:"LiteLLM < 1.84.0 Improper Authentication Vulnerability (GHSA-7488-6r32-c95q)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host has a vulnerable version of LiteLLM installed.");
  script_set_attribute(attribute:"description", value:
"The version of the LiteLLM Python package installed on the remote host is prior to 1.84.0. It is, therefore, affected
by a vulnerability:

  - LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint. When
    LiteLLM key validation fails, the fallback OAuth2 passthrough path populates the session with an empty
    UserAPIKeyAuth() object instead of rejecting the request. An unauthenticated attacker can supply a
    fabricated Bearer token to trigger this fallback, establishing an authenticated MCP session and gaining
    access to MCP tools and connected services without valid credentials. (CVE-2026-59822)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://github.com/advisories/GHSA-7488-6r32-c95q");
  script_set_attribute(attribute:"see_also", value:"https://github.com/BerriAI/litellm/releases/tag/v1.84.0");
  script_set_attribute(attribute:"see_also", value:"https://www.wiz.io/blog/ai-infrastructure-honeypot");
  script_set_attribute(attribute:"solution", value:
"Upgrade to LiteLLM version 1.84.0 or later.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:P/A:N");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-59822");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/06/30");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/06/30");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/10/09");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"asset_categories", value:"component");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:litellm:litellm");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Artificial Intelligence");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("python_litellm_detect.nasl");
  script_require_ports("installed_sw/LiteLLM");

  exit(0);
}

include('python.inc');

var pkg = 'LiteLLM';
var cpe = 'cpe:/a:litellm:litellm';

var libs = python::get_package_info(pkg_name:pkg, cpe:cpe);

if (empty_or_null(libs))
  audit(AUDIT_NOT_INST, pkg);

vcf::check_all_backporting(app_info:libs);

var constraints = [
  { 'fixed_version' : '1.84.0' }
];

vcf::check_version_and_report(app_info:libs, constraints:constraints, severity:SECURITY_HOLE);