Skip to content
Threat Feed

Vendor

BerriAI

1 brief RSS
high advisory

LiteLLM Authenticated Command Injection via MCP stdio Test Endpoints (CVE-2026-42271)

A command injection vulnerability exists in LiteLLM versions 1.74.2 to < 1.83.7, allowing authenticated users with a valid API key to execute arbitrary OS commands as root via the MCP stdio transport through the `POST /mcp-rest/test/connection` and `POST /mcp-rest/test/tools/list` endpoints, especially in default Docker deployments, and a public exploit is available.

LiteLLM command injection rce CVE-2026-42271
2r 1t 1c