CVE-2026-12773

CVE-2026-12773 affects BerriAI litellm MCP Proxy up to version 1.59.8. The weakness lies in the UserAPIKeyAuth function (litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py) of the MCP Proxy component, where improper authentication can be triggered by remote manipulation. The des...

EUVD-2026-38139

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/experimental/mcpserver/auth/userapikeyauthmcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched...