CVE

CVE-2026-30623

9.8

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuration specifying arbitrary command and args values. LiteLLM executes these values on the host without validation, enabling attackers to run arbitrary operating system commands. Successful exploitation may result in remote code execution with the privileges of the LiteLLM process.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Updated Nov 6, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2026-30623 Scanner

CVE-2026-30623 Scanner - Command Injection vulnerability in LiteLLM

Used 2.4k times · 4.2k assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →