How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Security Update: CVE-2026-30623 — Command Injection via Anthropic's MCP SDK

calendar_today April 21, 2026 person Ishaan Jaffer domain litellm

CVE-2026-30623 (authenticated RCE via MCP stdio transport) is fixed. Upgrade to v1.83.6-nightly or v1.83.7-stable or later.

open_in_new Read original post