Critical RCE vulnerability in LiteLLM exploited in the wild, CISA adds to KEV list

A critical remote code execution vulnerability, CVE-2026-42271, has been identified in LiteLLM, a popular open-source AI model gateway. This flaw, when combined with a Starlette host-header bypass (CVE-2026-48710), allows for unauthenticated remote code execution. CISA has added this vulnerability to its Known Exploited Vulnerabilities catalog due to active exploitation in the wild, urging immediate patching and credential rotation for affected systems. AI

IMPACT This critical vulnerability in LiteLLM, a key AI gateway, necessitates immediate patching and credential rotation to prevent unauthorized access and potential data breaches for AI deployments.

RANK_REASON Security advisory detailing a critical vulnerability and its exploitation in a widely used AI gateway.

Read on dev.to — MCP tag →

• CISA
• CSO Online
• CVE-2026-42271
• CVE-2026-48710
• Help Net Security
• Horizon3.ai
• LiteLLM
• Snyk
• Starlette

• product
• safety

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →