LiteLLM < 1.84.0 Improper Authentication Vulnerability (GHSA-7488-6r32-c95q)

The version of the LiteLLM Python package installed on the remote host is prior to 1.84.0. It is, therefore, affected by a vulnerability: - LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint. When LiteLLM key validation fails, the fallback OAuth2...

CVE-2026-59822

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallback path that replaced failed LiteLLM key...