CVE-2026-49468
LiteLLM: Authentication Bypass via Host Header Injection
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, a Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated access to protected management routes. The auth layer derived the effective route from request.url.path in litellm/proxy/auth/auth_utils.py::get_request_route(), which Starlette reconstructs from the Host header. A crafted Host could therefore make the auth gate evaluate a different route from the one FastAPI dispatched. This vulnerability is fixed in 1.84.0.
| CWE | CWE-290 |
| Vendor | berriai |
| Product | litellm |
| Published | Jun 22, 2026 |
| Last Updated | Jul 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for berriai litellm
Be the first to know when new high vulnerabilities affecting berriai litellm are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
BerriAI / litellm
< 1.84.0
References
github.com: https://github.com/BerriAI/litellm/security/advisories/GHSA-4xpc-pv4p-pm3w github.com: https://github.com/BerriAI/litellm/releases/tag/v1.84.0 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-49468 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2491520 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49468.json