CVE record · 2 sources
CVE-2026-59822
KEVBerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to…
- Vendor
- OpenAI
- Product
- ChatGPT / OpenAI, AI / LLM tooling
- CISA KEV
- listed
- Exposure class
- AI infrastructure, Developer platform, Collaboration
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to…
BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token.
-
CISA Adds Seven Known Exploited Vulnerabilities to Catalog
CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CVE-2026-48710 Kludex Starlette…