The Relay Has No Lock: LiteLLM’s MCP Auth Bypass Marks a First for the CISA KEV Catalog
September 19, 2026
1 min read
3 views
cybersecurity
news
newsapi
Mechanism: The OAuth2 Passthrough Fallback The vulnerability, tracked as CVE-2026-59822, originates in the authentication handler for the Model Context Protocol (MCP) within LiteLLM. LiteLLM serves as a proxy layer between enterprise applications and various
Was this article helpful?
0 found this helpful