Remote Code Execution Vulnerability in LiteLLM by BerriAI
CVE-2026-30623

Currently unrated

Key Information:

Vendor

BerriAI

Status
LiteLLM
Vendor
CVE Published:
15 July 2026

What is CVE-2026-30623?

LiteLLM 1.18.10 contains a significant vulnerability that allows an attacker to execute arbitrary operating system commands on the host system due to improper validation of user-supplied configuration for MCP server creation. By injecting malicious command and argument values via a JSON configuration file, attackers can leverage this flaw to gain unauthorized access and control over the affected system. This can lead to severe consequences, including data breaches and system integrity compromises.

References

https://github.com/BerriAI/litellm
https://www.ox.security/blog/mcp-supply-chain-advisory-rc...
https://docs.litellm.ai/blog/mcp-stdio-command-injection-...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.