CVE-2026-30623

Awaiting Analysis Awaiting Analysis - Queue

Remote Code Execution in LiteLLM MCP Server

Publication date: 2026-07-15

Last updated on: 2026-07-16

Assigner: MITRE

Description

LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuration specifying arbitrary command and args values. LiteLLM executes these values on the host without validation, enabling attackers to run arbitrary operating system commands. Successful exploitation may result in remote code execution with the privileges of the LiteLLM process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-15

Last Modified

2026-07-16

Generated

2026-08-05

AI Q&A

2026-07-16

EPSS Evaluated

2026-08-03

NVD

CVE-2026-30623

EUVD

EUVD-2026-44846

Affected Vendors & Products

Vendor	Product	Version / Range
litellm	litellm	1.18.10

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-77	The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

LiteLLM 1.18.10 has a remote code execution vulnerability in its MCP server creation feature. The application lets users add MCP servers using a JSON config that specifies arbitrary command and args values. LiteLLM runs these values on the host without checking them, allowing attackers to execute any operating system commands. This could lead to remote code execution with the same permissions as the LiteLLM process.

Detection Guidance

Check LiteLLM configuration files for MCP server entries with arbitrary command and args values. Inspect running processes for unexpected LiteLLM instances with suspicious command-line arguments.

Impact Analysis

If you use LiteLLM 1.18.10, an attacker could exploit this to run malicious commands on your system. This may allow them to take control of your server, steal data, install malware, or disrupt services. The impact depends on the permissions of the LiteLLM process.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR and HIPAA requirements for data protection and security. Organizations using LiteLLM 1.18.10 may face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Upgrade LiteLLM to a patched version. Disable MCP server creation if not needed. Restrict LiteLLM process permissions to limit damage from potential exploitation.

Hi! I’m here to help you understand CVE-2026-30623. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70