Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-42271

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list — accepted a full server configuration in the request body, including the command, args, and env fields used by the stdio transport. When called with a stdio configuration, the endpoints attempted to connect, which spawned the supplied com
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:3d20e5ef66348252507e94d57b55dfb5c6782e1347c6edb465318eb88503c935
Known exploited
CISA KEV
Disputed
No
Stale source
No
Conflicts
3

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 8 assertions

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"defaultStatus":"affected","packageName":"rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9","product":"Red Hat OpenShift AI 3.4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1781622627","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/affected/2

{"product":"litellm","vendor":"BerriAI","versions":[{"status":"affected","version":">= 1.74.2, < 1.83.7"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/cna/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-mlflow-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/affected/6

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"unaffected","packageName":"ansible-automation-platform-26/lightspeed-chatbot-rhel9","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/affected/4

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"unaffected","packageName":"ansible-automation-platform-27/lightspeed-chatbot-rhel9","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/affected/5

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"defaultStatus":"affected","packageName":"rhoai/odh-llama-stack-core-rhel9","product":"Red Hat OpenShift AI 3.3","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782310008","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/affected/1

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:exploit_intelligence:0"],"defaultStatus":"unaffected","packageName":"exploit-intelligence-tech-preview/vulnerability-analysis-rhel9","product":"Exploit Intelligence","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/affected/3

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:2.25::el9"],"defaultStatus":"affected","packageName":"rhoai/odh-llama-stack-core-rhel9","product":"Red Hat OpenShift AI 2.25","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1781826406","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/affected/0
cvss · 2 assertions

{"metric":{"attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","baseScore":8.7,"baseSeverity":"HIGH","privilegesRequired":"LOW","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"NONE","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/cna/metrics/0/cvssV4_0

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/metrics/1/cvssV3_1
cwe · 3 assertions

{"cweId":"CWE-78","description":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/problemTypes/0/descriptions/0

{"cweId":"CWE-78","description":"CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/cna/problemTypes/1/descriptions/0

{"cweId":"CWE-77","description":"CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/cna/problemTypes/0/descriptions/0

Affected products and versions

8 source assertions
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"defaultStatus":"affected","packageName":"rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9","product":"Red Hat OpenShift AI 3.4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1781622627","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/affected/2
{"product":"litellm","vendor":"BerriAI","versions":[{"status":"affected","version":">= 1.74.2, < 1.83.7"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/cna/affected/0
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_ai"],"defaultStatus":"unaffected","packageName":"rhoai/odh-mlflow-rhel9","product":"Red Hat OpenShift AI (RHOAI)","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/affected/6
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"unaffected","packageName":"ansible-automation-platform-26/lightspeed-chatbot-rhel9","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/affected/4
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"unaffected","packageName":"ansible-automation-platform-27/lightspeed-chatbot-rhel9","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/affected/5
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"],"defaultStatus":"affected","packageName":"rhoai/odh-llama-stack-core-rhel9","product":"Red Hat OpenShift AI 3.3","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1782310008","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/affected/1
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:exploit_intelligence:0"],"defaultStatus":"unaffected","packageName":"exploit-intelligence-tech-preview/vulnerability-analysis-rhel9","product":"Exploit Intelligence","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/affected/3
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:2.25::el9"],"defaultStatus":"affected","packageName":"rhoai/odh-llama-stack-core-rhel9","product":"Red Hat OpenShift AI 2.25","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1781826406","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/affected/0

Provider-owned CVSS observations

2 source assertions
{"metric":{"attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"NETWORK","baseScore":8.7,"baseSeverity":"HIGH","privilegesRequired":"LOW","subAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"NONE","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH"},"metric_type":"cvssV4_0"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/cna/metrics/0/cvssV4_0
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/metrics/1/cvssV3_1

CWE assertions

3 source assertions
{"cweId":"CWE-78","description":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/problemTypes/0/descriptions/0
{"cweId":"CWE-78","description":"CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/cna/problemTypes/1/descriptions/0
{"cweId":"CWE-77","description":"CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/cna/problemTypes/0/descriptions/0

Known exploitation assertions

2 source assertions
{"cwes":["CWE-78","CWE-77"],"dateAdded":"2026-06-08","dueDate":"2026-06-22","knownRansomwareCampaignUse":"Unknown","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g ; https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable ; https://nvd.nist.gov/vuln/detail/CVE-2026-42271","product":"LiteLLM","requiredAction":"Apply mitigations pe…
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:a25e44befc30333b21ac538551456573cb693506771ebb69f7c1e252fa3c7c87 · sha256:16acee8334e59e44… · /vulnerabilities/43
    Open source location →
{"cwes":["CWE-78","CWE-77"],"dateAdded":"2026-06-08","dueDate":"2026-06-22","knownRansomwareCampaignUse":"Unknown","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g ; https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable ; https://nvd.nist.gov/vuln/detail/CVE-2026-42271","product":"LiteLLM","requiredAction":"Apply mitigations pe…
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:27a24d54d99014f2d9b2a157ff5d7785ad33dcae4158f0ed1b3b369a71903408 · sha256:635dff916c4092c0… · /vulnerabilities/46
    Open source location →

Source references

9 source assertions
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:27784"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/references/5
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:28960"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/references/3
{"tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:30056"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/references/4
{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-42271"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/references/0
{"name":"RHBZ#2467924","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2467924"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/references/1
{"name":"https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable","tags":["x_refsource_MISC"],"url":"https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/cna/references/1
{"name":"https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g","tags":["x_refsource_CONFIRM"],"url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/cna/references/0
{"tags":["x_sadp-csaf-vex"],"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42271.json"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/1/references/2
{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42271"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c90f5fa8f45bd55164fcdcc6fb92856ded467c0163ff423feb5ecbceece9b235 · sha256:3d9180addd8db3d9… · /containers/adp/0/references/0

Attribution and limitations

  • CISA Known Exploited Vulnerabilities JSON: CISA named for provenance; do not use CISA/DHS marks or imply endorsement Source →
  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer