Threat
CVE Record: CVE-2026-114612
Publication date unknown · Discovered cve.org
Page published
Publication date unknown · First observed: 3 Nov 2026
Coverage timeline
Single-source advisory — one report is available.
Why it matters
CVE-2026-114612 turns low-privileged access to an affected LiteLLM gateway into administrative control and arbitrary command execution, making upgrades a priority for defenders operating the proxy.
CVE-2026-114612 allows an authenticated internal LiteLLM user to escalate to proxy administrator because the AI gateway reuses a cryptographic context for stored secrets and session tokens. An attacker can obtain an encrypted forged administrator credential through the API-key flow, replay it as a bearer token, and execute arbitrary commands through the MCP stdio endpoint. Fixes are available in versions 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0-rc.2.