{"schema":"vulnpedia.poc/1","cve":"CVE-2026-42271","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2026-06-08","ransomware":false},"epss":{"score":0.91445,"percentile":0.99811},"cvss":{"version":"4.0","score":8.7,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/litellm_mcp_test_cmd_injection.rb","executable":true,"sourceId":"exploit/multi/http/litellm_mcp_test_cmd_injection","description":"BerriAI LiteLLM Proxy MCP Test Endpoint Command Execution","verification":"catalogued","source":"metasploit","modified":"2026-09-14 06:46:45 +0000","origins":[{"source":"metasploit","sourceId":"exploit/multi/http/litellm_mcp_test_cmd_injection","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/litellm_mcp_test_cmd_injection.rb"},{"source":"metasploit","sourceId":"exploit/multi/http/litellm_mcp_test_cmd_injection","modified":"2026-09-14 06:46:45 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/litellm_mcp_test_cmd_injection.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/9d2bfb7ce628","executable":false,"sourceId":"9d2bfb7ce628","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9d2bfb7ce628","modified":"2026-06-08T00:00:00Z","url":"https://vulncheck.com/xdb/9d2bfb7ce628"}],"repositoryUrl":"https://github.com/learner202649/CVE-2026-42271-PoC"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/0d879acd0332","executable":false,"sourceId":"0d879acd0332","verification":"catalogued","source":"vulncheck-kev","modified":"2026-06-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"0d879acd0332","modified":"2026-06-08T00:00:00Z","url":"https://vulncheck.com/xdb/0d879acd0332"}],"repositoryUrl":"https://github.com/amnsecurity/CVE-2026-42271-LiteLLM-RCE"}],"poc_candidates":[{"url":"https://github.com/learner202649/CVE-2026-42271-PoC","source":"poc-in-github","sourceId":"CVE-2026-42271","description":"The code for personally reproducing the corresponding vulnerability","modified":"2026-10-14T08:25:57Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-42271","url":"https://github.com/learner202649/CVE-2026-42271-PoC"},{"source":"poc-in-github","sourceId":"CVE-2026-42271","modified":"2026-10-14T08:25:57Z","url":"https://github.com/learner202649/CVE-2026-42271-PoC"}],"tags":[]},{"url":"https://github.com/HORKimhab/CVE-2026-42271","source":"poc-in-github","sourceId":"CVE-2026-42271","description":"CVE-2026-42271 - Draft","modified":"2026-06-09T08:13:20Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-42271","url":"https://github.com/HORKimhab/CVE-2026-42271"},{"source":"poc-in-github","sourceId":"CVE-2026-42271","modified":"2026-06-09T08:13:20Z","url":"https://github.com/HORKimhab/CVE-2026-42271"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2026-42271 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-42271/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42271.yaml","template":"http/cves/2026/CVE-2026-42271.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-42271%22&type=repositories","executable":false}]}