Database/AI/ML frameworks & serving
LiteLLM (MCP server creation): RCE via MCP server registration
CVSS 9.8CVE-2026-30623AI/ML frameworks & servingcurated
Impact
RCE via MCP server registration
Who can reach it
Network user able to add an MCP server
What to do
Upgrade; MCP registration is a code-execution primitive
References
Related entries
- Kubeflow (ART component): RCE in the robustness evaluation functionCVE-2026-31228 · Kubeflow (ART component)Critical
- Kubeflow (Adversarial Robustness Toolbox component): Insecure deserialization in the Kubeflow model-loading componentCVE-2026-31229 · Kubeflow (Adversarial Robustness Toolbox component)Critical
- Adversarial Robustness Toolbox (Kubeflow component, robustness_evaluation_fgsm_pytorch.py): The ART Kubeflow evaluationCVE-2026-31230 · Adversarial Robustness Toolbox (Kubeflow component, robustness_evaluation_fgsm_pytorch.py)Critical
- llama.cpp (RPC `deserialize_tensor`): RPC backend skips all bounds validationCVE-2026-34159 · llama.cpp (RPC `deserialize_tensor`)Critical
- Apache OpenNLP: model archive manifest names any classpath class and runs its static initializerCVE-2026-42027 · Apache OpenNLP ExtensionLoader (model archive manifest.properties)Critical
- LiteLLM proxy: SQL injection in a database query pathCVE-2026-42208 · LiteLLM proxyCritical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.