CVE-2026-49468criticalBroken access control2026-06-16
CVE-2026-49468: LiteLLM: Authentication Bypass via Host Header Injection
A Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated access to protected management routes.
What it is
A Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated access to protected management routes.
The auth layer derived the effective route from request.url.path in litellm/proxy/auth/auth_utils.py::get_request_route(), which Starlette reconstructs from the Host header. A crafted Host could therefore make the auth gate evaluate a different route from the one FastAPI dispatched.
Most deployments are not affected. The bypass is blocked by any upstream layer that validates or normalizes Host, such as:
How to check
- Affected: litellm (pip) < 1.84.0.
- Compare your installed version with the range above (command below).
How to fix
- Upgrade litellm to 1.84.0 or later.
pip show litellm | grep VersionSources
More advisories for this tool
- criticalCVE-2026-37004: LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint
- criticalCVE-2026-42208: LiteLLM has SQL Injection in Proxy API key verification
- mediumCVE-2026-84377: LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters