CVE-2026-30623 Details
Description
LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuration specifying arbitrary command and args values. LiteLLM executes these values on the host without validation, enabling attackers to run arbitrary operating system commands. Successful exploitation may result in remote code execution with the privileges of the LiteLLM process.
A remote code execution vulnerability has been identified in LiteLLM version 1.18.10. The issue arises in the MCP server creation feature, where users can add servers by specifying arbitrary commands and arguments through a JSON configuration. LiteLLM executes these inputs on the host system without proper validation, allowing attackers to execute any operating system commands. Exploitation of this vulnerability could lead to remote code execution with the same privileges as the LiteLLM process.
Users can upgrade to LiteLLM versions 1.83.7-stable or later, where this vulnerability has been fixed. If the 'stdio' transport was used before the upgrade, the MCP server configuration should be updated to comply with the new command allowlist.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') | CISA-ADP |
Affected Products
No affected product data is available for this CVE.
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 16, 2026 | CVE Modified | CISA-ADP |
| Jul 15, 2026 | New CVE Received | [email protected] |