CVE

CVE-2026-30623

9.8

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuration specifying arbitrary command and args values. LiteLLM executes these values on the host without validation, enabling attackers to run arbitrary operating system commands. Successful exploitation may result in remote code execution with the privileges of the LiteLLM process.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Updated Nov 10, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

LiteLLM 1.18.10 - Command Injection

LiteLLM 1.18.10 contains a remote code execution caused by lack of validation of arbitrary command and args in MCP server creation, letting attackers execute OS commands remotely, exploit requires crafted JSON configuration. References: https://docs.litellm.ai/blog/mcp-stdio-command-injection-april-2026 https://cveawg.mitre.org/api/cve/CVE-2026-30623 https://github.com/BerriAI/litellm Remediation: Update to the latest version of LiteLLM with validation for MCP server commands.

10 assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →