A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of
    the file litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py of the component MCP Proxy.
    Executing a manipulation can lead to improper authentication. The attack may be launched remotely. The
    exploit has been made available to the public and could be used for attacks. The vendor was contacted
    early about this disclosure. (CVE-2026-12773)

ID	Name	Product	Family	Type	Severity
462802	Echo: litellm: security update to 1.84.0	Tenable Cloud Security	Echo Local Security Checks	Local	medium
462802	Echo: litellm: security update to 1.84.0	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
447945	SCA: security update for litellm (GHSA-4jcj-7x88-m979)	Tenable Cloud Security	SCA Checks	Local	medium
447945	SCA: security update for litellm (GHSA-4jcj-7x88-m979)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-12773

medium

Tenable Plugins

medium

medium

medium

medium