https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:48:52.107335+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-aider-cve-2026-12773 BREW-aider-CVE-2026-12773 — LiteLLM: MCP Proxy Has Improper Authentication 2026-10-03T17:48:52.203849+00:00

Affected: Homebrew: aider

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

 https://cve.radiocsirt.org/vuln/euvd-2026-337538 EUVD-2026-337538 2026-10-03T17:48:52.203905+00:00 EUVD-2026-337538 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12773 fkie_cve-2026-12773 2026-10-03T17:48:52.203921+00:00

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

 https://cve.radiocsirt.org/vuln/ghsa-4jcj-7x88-m979 GHSA-4jcj-7x88-m979 — LiteLLM: MCP Proxy Has Improper Authentication 2026-10-03T17:48:52.203945+00:00

Affected: PyPI: litellm

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

 https://cve.radiocsirt.org/vuln/pysec-2026-4067 PYSEC-2026-4067 — LiteLLM: MCP Proxy Has Improper Authentication 2026-10-03T17:48:52.203967+00:00

Affected: PyPI: litellm

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.