CyberRota Analysis
AI-GeneratedLiteLLM versions prior to 1.84.0 are vulnerable due to an insecure MCP Streamable HTTP endpoint that permits unauthenticated attackers to bypass key validation using a forged Authorization header, enabling unauthorized access to MCP tooling. This vulnerability poses a high risk as it allows attackers to exploit the system without proper authentication, potentially leading to data breaches or unauthorized actions. Organizations utilizing LiteLLM should prioritize upgrading to version 1.84.0 or later to mitigate this security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM's MCP Streamable HTTP endpoint allowed an unauthenticated attacker to use a fabricated Authorization header to trigger an OAuth2 passthrough fallback path that replaced failed LiteLLM key validation with an empty UserAPIKeyAuth() object, allowing requests to reach MCP tooling without a valid LiteLLM key. This issue is fixed in version 1.84.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)