CVE-2026-30623

LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality

Critical · published July 15, 2026

CVSS v3.1
9.8
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuration specifying arbitrary command and args values. LiteLLM executes these values on the host without validation, enabling attackers to run arbitrary operating system commands. Successful exploitation may result in remote code execution with the privileges of the LiteLLM process.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.04997 · 92.2th percentile
Published
2026-07-15T00:00Z
EPSS history
Timeline
  • 15 JUL 00:00Z
    LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality
    cvelistv5