ThreatsCloud & SaaSCriticalLiteLLM MCP Server Creation Flaw CVE-2026-30623 Enables Remote Code Execution via Malicious Tool ConfigurationsCritical CVSS 9.8 flaw CVE-2026-30623 in LiteLLM allows remote attackers to execute arbitrary operating system commands via unvalidated Model Context Protocol server parameters.Mei-Lin Chen·21 Sep 2026, 08:00 IST·14 min read