Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-12774

Опубликовано: 21 июн. 2026
Источник: redhat
CVSS3: 6.3
EPSS Низкий

Описание

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function _execute_with_mcp_client of the file litellm/proxy/_experimental/mcp_server/rest_endpoints.py of the component MCP Server Connection Testing. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.

A flaw was found in BerriAI litellm. A remote attacker could exploit a Server-Side Request Forgery (SSRF) vulnerability in the MCP Server Connection Testing component. This flaw, specifically within the _execute_with_mcp_client function, allows an attacker to trick the server into making unauthorized requests to internal or external resources, potentially leading to information disclosure or access to restricted services.

Отчет

This Moderate impact Server-Side Request Forgery (SSRF) vulnerability in BerriAI litellm's MCP Server Connection Testing component allows a remote attacker with low privileges to induce the server to make unauthorized requests. This could lead to information disclosure or access to internal or external resources, affecting Red Hat OpenShift AI and Red Hat Ansible Automation Platform deployments where the vulnerable component is utilized.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Exploit Intelligenceexploit-intelligence-tech-preview/vulnerability-analysis-rhel9Fix deferred
Red Hat Ansible Automation Platform 2ansible-automation-platform-26/lightspeed-chatbot-rhel9Fix deferred
Red Hat Ansible Automation Platform 2ansible-automation-platform-27/lightspeed-chatbot-rhel9Fix deferred
Red Hat OpenShift AI (RHOAI)rhoai/odh-llama-stack-core-rhel9Fix deferred
Red Hat OpenShift AI (RHOAI)rhoai/odh-mlflow-rhel9Fix deferred
Red Hat OpenShift AI (RHOAI)rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9Fix deferred

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-918
https://bugzilla.redhat.com/show_bug.cgi?id=2491113litellm: BerriAI litellm: Server-Side Request Forgery in MCP Server Connection Testing

EPSS

Процентиль: 18%
0.00262
Низкий

6.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.3
nvd
около 2 месяцев назад

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function _execute_with_mcp_client of the file litellm/proxy/_experimental/mcp_server/rest_endpoints.py of the component MCP Server Connection Testing. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.

CVSS3: 6.3
github
около 2 месяцев назад

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function _execute_with_mcp_client of the file litellm/proxy/_experimental/mcp_server/rest_endpoints.py of the component MCP Server Connection Testing. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.

EPSS

Процентиль: 18%
0.00262
Низкий

6.3 Medium

CVSS3