access.redhat.comvdb entry
https://access.redhat.com/security/cve/CVE-2026-12773 CVE-2026-12773
MEDIUM
BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication
Record summary
CVE-2026-12773 has a selected CVSS score of 6.9 (medium).
Description
A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 22, 2026 · Source: CVE List
Affected products and versions
7| Product | Source | Version range | Status |
|---|---|---|---|
litellmBrowse BerriAI / litellm | CVE List | 1.59.0 | affected |
| 1.59.1 | affected | ||
| 1.59.2 | affected | ||
| 1.59.3 | affected | ||
| 1.59.4 | affected | ||
| 1.59.5 | affected | ||
| 1.59.6 | affected | ||
| 1.59.7 | affected | ||
| 1.59.8 | affected | ||
Exploit IntelligenceBrowse Red Hat / Exploit Intelligenceexploit-intelligence-tech-preview/vulnerability-analysis-rhel9Default status: affected | CVE List | Version data not supplied | |
Red Hat Ansible Automation Platform 2Browse Red Hat / Red Hat Ansible Automation Platform 2ansible-automation-platform-26/lightspeed-chatbot-rhel9Default status: unaffected | CVE List | Version data not supplied | |
Red Hat Ansible Automation Platform 2Browse Red Hat / Red Hat Ansible Automation Platform 2ansible-automation-platform-27/lightspeed-chatbot-rhel9Default status: unaffected | CVE List | Version data not supplied | |
Red Hat OpenShift AI (RHOAI)Browse Red Hat / Red Hat OpenShift AI (RHOAI)rhoai/odh-llama-stack-core-rhel9Default status: unaffected | CVE List | Version data not supplied | |
Default status: unaffected | CVE List | Version data not supplied | |
Red Hat OpenShift AI (RHOAI)Browse Red Hat / Red Hat OpenShift AI (RHOAI)rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9Default status: unaffected | CVE List | Version data not supplied | |
References
9RHBZ#2491112issue tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2491112 gist.github.comexploit
https://gist.github.com/YLChen-007/3cfaad10a69d7a15e4d4d458cb53309e nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-12773 security.access.redhat.comx_sadp csaf vex
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-12773.json CVE-2026-12773 | CVE Analysis and ReportThird-party advisory
https://vuldb.com/cve/CVE-2026-12773 Submit #811282 | litellm <= 1.59.8 Improper Authentication (CWE-287)Third-party advisory
https://vuldb.com/submit/811282 VDB-372515 | BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authenticationvdb entryTechnical description
https://vuldb.com/vuln/372515 VDB-372515 | CTI Indicators (IOB, IOC, IOA)signaturepermissions required
https://vuldb.com/vuln/372515/cti