CVE-2026-30623 BerriAI CVE debrief

Who should care

Users and administrators of LiteLLM 1.18.10 should be aware of this vulnerability and take immediate action to mitigate the risk. This vulnerability is particularly concerning as it allows for remote code execution, which can lead to a complete compromise of the affected system. Operators, platform administrators, vulnerability management teams, and security teams should review the affected scope and take action.

Technical summary

The vulnerability exists in the MCP server creation functionality of LiteLLM 1.18.10. The application allows users to add MCP servers via a JSON configuration specifying arbitrary command and args values. LiteLLM executes these values on the host without validation, enabling attackers to run arbitrary operating system commands. The CVSS score for this vulnerability is 9.8, indicating a critical severity. Affected product deployments should be reviewed for exposure.

Defensive priority

Highest priority should be given to mitigating this vulnerability due to its critical severity and potential for remote code execution. Immediate action is required to prevent exploitation. Compensating controls and monitoring should be implemented while remediation is scheduled and verified. Exceptions should be tracked, and remediated assets should be retested before closing the item. Evidence of remediation should be documented. Additional security controls, such as input validation and command sanitization, should be implemented to prevent similar vulnerabilities in the future. The affected product deployments should be reviewed for exposure, and owners should be assigned for follow-up. Official advisories or CVE records should be reviewed to validate affected scope, severity, and vendor guidance. Vendor-supported updates or mitigations should be planned through normal change control where exposure is confirmed. Monitoring, detection, and logs should be reviewed for exposed assets that need extra review. Asset inventory and source tracking should be implemented to prevent similar vulnerabilities in the future. Rollback/change windows should be considered to prevent exploitation. Exposure review should be conducted to identify potential vulnerabilities. Compensating controls should be implemented to prevent exploitation while remediation is scheduled and verified. The vulnerability management team should review the affected scope and take action to mitigate the risk. The security team should review the affected scope and take action to mitigate the risk. The operators and platform administrators should review the affected scope and take action to mitigate the risk. The CVSS score for this vulnerability is 9.8, indicating a critical severity. The vulnerability is particularly concerning as it allows for remote code execution, which can lead to a complete compromise of the affected system. The vulnerability exists in the MCP server creation functionality of LiteLLM 1.18.10. The application allows users to add MCP servers via a JSON configuration specifying arbitrary command and args values. LiteLLM executes these values on the host without validation, enabling

Recommended defensive actions

• Immediately update LiteLLM to a version that fixes this vulnerability
• Restrict access to the MCP server creation functionality to only trusted users
• Implement additional security controls, such as input validation and command sanitization
• Monitor for suspicious activity and implement incident response plans
• Conduct an exposure review to identify potential vulnerabilities
• Implement compensating controls to prevent exploitation while remediation is scheduled and verified
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record was published on 2026-07-15T22:16:46.317Z and was last modified on 2026-07-16T14:16:50.013Z. The NVD entry is currently Awaiting Analysis. The vulnerability was reported by an unknown source. Evidence is limited, and defenders should verify the affected scope and vendor guidance.

Official resources