CVE-2026-12773

CVE-2026-12773 affects BerriAI litellm MCP Proxy up to version 1.59.8. The weakness lies in the UserAPIKeyAuth function (litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py) of the MCP Proxy component, where improper authentication can be triggered by remote manipulation. The des...