CVE-2026-42271 - Vulnerability Analysis

Overview

LiteLLM 1.74.2 to < 1.83.7 contains a command injection caused by unsanitized command, args, and env fields in stdio transport configuration in POST /mcp-rest/test/connection and /mcp-rest/test/tools/list endpoints, letting authenticated users execute arbitrary commands on the proxy host, exploit requires valid proxy API key.

Severity & Score

Impact

Authenticated users can execute arbitrary commands on the proxy host, leading to full system compromise.

Mitigation

Upgrade to version 1.83.7 or later.

References

• https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable
• https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner