Vulnerability Description
A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function load_openapi_spec_async of the file litellm/proxy/_experimental/mcp_server/openapi_to_mcp_generator.py of the component MCP OpenAPI Spec Loader. This manipulation of the argument spec_path causes server-side request forgery. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Litellm | Litellm | <= 1.82.2 |
Related Weaknesses (CWE)
References
- https://gist.github.com/YLChen-007/c1104c529975699ba347feedfbe02c5aExploitThird Party Advisory
- https://vuldb.com/cve/CVE-2026-12798Third Party AdvisoryVDB Entry
- https://vuldb.com/submit/811290Third Party AdvisoryExploitVDB Entry
- https://vuldb.com/vuln/372560Third Party AdvisoryVDB Entry
- https://vuldb.com/vuln/372560/ctiPermissions RequiredVDB Entry
FAQ
What is CVE-2026-12798?
CVE-2026-12798 is a vulnerability with a CVSS score of 6.3 (MEDIUM). A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function load_openapi_spec_async of the file litellm/proxy/_experimental/mcp_server/openapi_to_mcp...
How severe is CVE-2026-12798?
CVE-2026-12798 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-12798?
Check the references section above for vendor advisories and patch information. Affected products include: Litellm Litellm.