{
 "id": "AIR-2026-0828",
 "slug": "cve-2026-59822-litellm-mcp-authentication-bypass-via-oauth2",
 "title": "CVE-2026-59822: LiteLLM MCP authentication bypass via OAuth2 fallback",
 "summary": "LiteLLM's MCP Streamable HTTP endpoint allowed unauthenticated attackers to establish sessions using arbitrary Bearer tokens due to an OAuth2 passthrough fallback flaw. This permitted unauthorized requests to reach MCP tooling and connected services without a valid key.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "LiteLLM"
 ],
 "incident_date": "2026-07-22",
 "incident_date_precision": "day",
 "first_reported": "2026-07-08",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59822",
   "publisher": "NVD",
   "title": "CVE-2026-59822: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.",
   "published_at": "2026-07-08"
  },
  {
   "url": "https://github.com/advisories/GHSA-7488-6r32-c95q",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-59822: LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback",
   "published_at": "2026-07-22"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-59822",
  "auth-bypass"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}