Known Exploited Vulnerabilities September 02, 2026 · CISA KEV Catalog

CVE-2026-59822: Berri AI LiteLLM Improper Authentication Vulnerability

BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: BerriAI CVE-2026-59822
Related: CVE-2026-42271: Berri AI LiteLLM Command Injection Vulnerability Known Exploited Vulnerabilities · Jun 08, 2026
CVE-2026-42208: Berri AI LiteLLM SQL Injection Vulnerability Known Exploited Vulnerabilities · May 08, 2026
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026