AI
Pourquoi la troisième faille LiteLLM au KEV concerne tout proxy LLM
On September 2, 2026, the US cybersecurity agency CISA added CVE-2026-59822 to its Known Exploited Vulnerabilities (KEV) catalog.
Key takeaways
- CISA added CVE-2026-59822, an authentication bypass in LiteLLM, to its Known Exploited Vulnerabilities catalog on September 2, 2026.
- The vulnerability allowed unauthenticated callers to obtain a list of tools and call them by sending a fabricated Authorization header.
- The vulnerability was patched in LiteLLM version 1.84.0, which was released on May 14, 2026.
- Wiz researchers discovered the flaw and documented active exploitation attempts targeting honeypots.
- This is the third LiteLLM vulnerability added to the KEV catalog in four months, following an SQL injection in May and a command injection in June.
On September 2, 2026, the US cybersecurity agency CISA added CVE-2026-59822 to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is an authentication bypass in the open-source LLM proxy LiteLLM, specifically affecting its Model Context Protocol (MCP) gateway. This marks the third LiteLLM vulnerability added to the KEV catalog in four months, highlighting the growing security risks of LLM proxies which centralize API keys, budgets, and tool access. Federal agencies have until September 16 to apply the patch, which was released on May 14, 2026, in version 1.84.0.
LLM proxies must now be treated with the same security rigor as API gateways.
In their words
“concentration d'identifiants”
By the numbers
- 3
- LiteLLM vulnerabilities added to the KEV in four months
- 10
- Open-source AI infrastructure vulnerabilities added to KEV since late March 2026
- 8.8
- CVSS 4.0 vulnerability severity score assigned by GitHub
- 90
- Days of telemetry on honeypots analyzed by Wiz
How it unfolded
- Pull request to fix the OAuth2 fallback vulnerability opened
- LiteLLM version 1.84.0 released with the security patch
- CVE-2026-59822 vulnerability record officially published
- CISA adds the LiteLLM vulnerability to its KEV catalog
Why this matters
-
LLM proxies are highly targeted because they concentrate API keys, manage budgets, and act as gateways to internal databases and code repositories.
Turn stories like this into views
Ravenclip finds the AI news, makes the video, and posts it before attention moves on.
Common questions
- What happened with LiteLLM?
- CISA added CVE-2026-59822, an authentication bypass in LiteLLM, to its Known Exploited Vulnerabilities catalog on September 2, 2026.
- Where can I read the original report?
- Read the full report at Actuia.
