Hacker News
Actively Exploited LiteLLM RCE (CVE-2026-42271) Threatens the Agent Stack
CISA added CVE-2026-42271 — a command-injection flaw (CVSS 8.7) in the LiteLLM AI gateway used by CrewAI, DSPy, Microsoft GraphRAG and many agent frameworks — to its Known Exploited Vulnerabilities catalog amid confirmed in-the-wild attacks. Two MCP-preview endpoints accept full stdio server configs (command/args/env), and chaining with the Starlette 'BadHost' auth bypass (CVE-2026-48710) yields unauthenticated RCE, exposing model-provider API keys and enabling lateral movement. Fixes shipped in LiteLLM v1.83.7 and Starlette 1.0.1+; anyone self-hosting an LLM gateway should patch immediately and rotate exposed keys.
↳ Follow the thread