LiteLLM CVE-2026-59822: First MCP Flaw on CISA’s Exploit List — Patch Now
CISA added CVE-2026-59822, an authentication bypass in LiteLLM's MCP Streamable HTTP endpoint rated CVSS 8.8, to its Known Exploited Vulnerabilities catalog on September 2 — the first MCP-specific flaw ever listed there.…