From Dev.to
The LiteLLM MCP auth bypass, and the one request that shows it
Originally published on mcpscore.dev. On 2 September 2026, CISA added CVE-2026-59822 to its Known Exploited Vulnerabilities catalog. LiteLLM’s MCP endpoint let anyone in who sent a bearer token, and a...