CVE-2026-42271

BerriAI LiteLLM Command Injection Vulnerability

Litellm

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list — accepted a full server configuration in the request body, including the command, args, and env fields used by the stdio transport. When called with a stdio configuration, the endpoints attempted to connect, which…

8. Mai 2026

Ausgewertete Quellen

• Red Hat
  https://access.redhat.com/errata/RHSA-2026:27784
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:28960
• Red Hat
  https://access.redhat.com/errata/RHSA-2026:30056
• Red Hat
  https://access.redhat.com/security/cve/CVE-2026-42271
• Red Hat
  https://bugzilla.redhat.com/show_bug.cgi?id=2467924
• Red Hat
  https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42271.json
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42271
• CISA
  BerriAI LiteLLM Command Injection Vulnerability
• NVD
  CVE-2026-42271
• GitHub
  https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g