CVE-2026-42271: HIGH (CVSS 8.8), Actively Exploited (CISA KEV)

HIGH (CVSS 8.8), Actively Exploited (CISA KEV), EPSS 75.9%. LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list — accepted a full server configuration