Security Advisory

LiteLLM Security Update Advisory (CVE-2026-59822)

  • Sep 03 2026
LiteLLM Security Update Advisory (CVE-2026-59822)

Overview

A security update has been released to address a vulnerability in LiteLLM. This vulnerability is an authentication bypass issue (CVE-2026-59822) caused by an error in the OAuth2 passthrough fallback handling.

Affected Products

  • LiteLLM versions prior to 1.84.0.

Resolved Vulnerabilities

  • CVE-2026-59822.
  • This is an authentication bypass vulnerability caused by an OAuth2 passthrough fallback processing error in LiteLLM.

Response

  • A Vulnerability Patch has been provided via the latest update.
  • LiteLLM users should update to version 1.84.0 Or higher following the instructions on the reference site.

Reference

  • MCP Authentication Bypass via OAuth2 Passthrough Fallback.
  • V1.84.0.

Tags:
Previous Post

Next Post