Vibe Coding
The first MCP flaw in CISA's known-exploited catalog is a LiteLLM auth bypass with a September 16 federal deadline
CVE-2026-59822 lets an unauthenticated attacker send a fabricated Authorization header to LiteLLM's MCP Streamable HTTP endpoint, triggering an OAuth2 passthrough fallback that substitutes an empty UserAPIKeyAuth() for failed key validation, so the request reaches MCP tool listing and invocation. CISA added it to the Known Exploited Vulnerabilities catalog on 2026-09-02 with a 2026-09-16 remediation date; the fix is LiteLLM 1.84.0. Worth flagging as older than the usual 48-hour window, but it is the first MCP-specific bug confirmed exploited in the wild, and a self-hosted LiteLLM in front of your agents inherits every tool it proxies.
↳ Follow the thread