CVE-2026-30623

CVE Enrichment

CVSS: 9.8 CRITICAL
EPSS: 5.00%
EPSS Percentile: 92.21%
CISA KEV: Not listed

Description

LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuration specifying arbitrary command and args values. LiteLLM executes these values on the host without validation, enabling attackers to run arbitrary operating system commands. Successful exploitation may result in remote code execution with the privileges of the LiteLLM process.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 16-Jul-2026 05:16
Last Modified: 16-Jul-2026 21:16
EPSS Date: 2026-10-29
CWE: CWE-77

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

References

Last enrichment sync: 30-Oct-2026 21:13
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

[CVE identifiers ] Publicly disclosed vulnerable components and exploit paths – CVE-2025-49596, CVE-2025-3248, and other listed CVEs such as CVE-2026-30623 CYFIRMA Report Details MCP Exploitation Paths and Defenses

CVE (3)

People (1)

MITRE ATT&CK (7)

Vendors (1)

Products (10)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.