CVE

CVE-2026-59822

View on NVD ↗

LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback

Exploitation IoCs 10

Domain 1710[.]rwlp[.]be
Domain crazyeltonproxy[.]top
Domain pool[.]hashvault[.]pro
Filename /tmp/.dbus-cache
Filename /tmp/.dbus-cache/gmon
Filename /tmp/amd64
Filename /tmp/x86_64
IP 185[.]62[.]1[.]8
IP 185[.]84[.]98[.]85
IP 94[.]26[.]106[.]29

MITRE ATT&CK TTPs 8

T1003
OS Credential Dumping
Credential Access
 T1012
Query Registry
Discovery
 T1059
Command and Scripting Interpreter
Execution
 T1059.001
PowerShell
Execution
 T1078.004
Cloud Accounts
Defense Evasion
 T1082
System Information Discovery
Discovery
 T1133
External Remote Services
Persistence
 T1566
Phishing
Initial Access

Source Articles

Inside 90 days of attacks on AI infrastructure
Wiz Threat Research observed 90 days of sustained attacks against AI infrastructure through honeypots deployed across services like LiteLLM, Flowise, and LangChain. Attackers exploited vulnerabilities in MCP servers, including authentication bypass and command injection (CVE-2026-59822, CVE-2026-42271), to achieve remote code execution and deploy cryptominers. A second pattern involved blind prompt injection against AI agent frameworks, where attackers used out-of-band DNS callbacks to confirm execution and later fetch payloads from Pastebin. Post-exploitation activity was tailored to AI environments, including in-memory extraction of LiteLLM master keys, model enumeration, and use of environment-specific camouflage to hide malicious binaries.
wiz