Am I affected by LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback? What should I do?
LiteLLM's MCP Streamable HTTP endpoint could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token.
Affected: litellm < 1.84.0. Fixed in: 1.84.0. What should you check, and what should you do about it?
Full incident page with sources: https://agentarmorhq.com/incidents/2026/07/cve-2026-59822-litellm (opens external site)
1 answer
Am I affected? Affected: litellm < 1.84.0. Fixed in: 1.84.0.
- Check your version: run
pip show litellm. Versions < 1.84.0 of litellm are affected.
What to do now
- Upgrade to the fixed version: run
pip install --upgrade "litellm>=1.84.0"(first patched version 1.84.0). - Upgrade to
1.84.0or later. - If upgrading is not immediately possible, disable MCP routes or block access to
/mcp/and related MCP endpoints at your reverse proxy or API gateway.
General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.
Sources
- GitHub Advisory Database: https://github.com/advisories/GHSA-7488-6r32-c95q (opens external site)
Full incident page: https://agentarmorhq.com/incidents/2026/07/cve-2026-59822-litellm (opens external site)
Did this work for you?- Check your version: run