LiteLLM fixes MCP auth bypass added to CISA exploited list

On 2 September 2026 CISA added CVE-2026-59822 to its Known Exploited Vulnerabilities catalog: LiteLLM's MCP endpoint accepted any bearer token, exposing every tool behind the gateway. The fix ships in 1.84.0, while releases 1.83.9 through 1.83.14 remain vulnerable.

• CVE-2026-59822: any bearer token granted anonymous access to MCP tools
• Only LiteLLM 1.84.0 fixes it; 1.83.9–1.83.14 stay exposed
• mcpscore 1.25.0 adds a check for rejecting fabricated tokens
• MCP spec requires HTTP 401 for invalid or expired tokens