Skip to content

v0.8.38 — CVE-2026-42271 KEV regression fixture (LiteLLM MCP command injection)

Choose a tag to compare

View all tags
@sattyamjjain sattyamjjain released this 28 Jun 08:06
v0.8.38
ecbc990
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • CVE-2026-42271 KEV regression fixture (LiteLLM MCP command injection). The deny-by-default guard for this CVE shipped in v0.8.22; this adds tests/cves/test_cve_2026_42271_kev_regression.py (8 tests) reproducing the actual LiteLLM /mcp-rest/test/connection + /mcp-rest/test/tools/list request bodies (stdio-transport command/args/env, per NVD) and proving the preset blocks them end-to-end (injected command, args[0]-smuggled program, LD_PRELOAD env vector), while a benign allow-listed launcher passes. Pins the scope boundary: a nested mcpServers map (a different format) is not auto-recursed — callers iterate server entries.

Fixed

  • Corrected the CVE-2026-42271 README metadata to match NVD: CVSS 8.8 (was 8.7), CWE-77 + CWE-78 (was 78), CISA KEV added 2026-06-08 (was 06-09).

No guard/preset behavior change — regression-proof of existing coverage of an actively-exploited KEV CVE. (#106)

Assets 2
Loading