CVE-2026-30623
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuration specifying arbitrary command and args values, which are executed on the host without validation. This enables attackers to run arbitrary operating system commands.
Risk Assessment
The risk for the organization includes full server compromise with the privileges of the LiteLLM process, potentially leading to data theft, malware installation, or further attacks on the infrastructure.
Recommendation
Immediately update LiteLLM to the latest version that fixes this vulnerability, and restrict access to the MCP server addition functionality to trusted users only.
Original NVD description (English source)
LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuration specifying arbitrary command and args values. LiteLLM executes these values on the host without validation, enabling attackers to run arbitrary operating system commands. Successful exploitation may result in remote code execution with the privileges of the LiteLLM process.