CVE-2026-49468 LiteLLM: Authentication Bypass via Host Header Injection
Attackers can bypass authentication on protected management routes by manipulating the Host header, potentially accessing sensitive data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-49468?
CVE-2026-49468 is a critical authentication bypass vulnerability in BerriAI litellm, published on 22 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, a Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated access to protected management routes. The auth layer derived the effective route from request.url.path in litellm/proxy/auth/auth_utils.py::get_request_route(), which Starlette reconstructs from the Host header. A crafted Host could therefore make the auth gate evaluate a different route from the one FastAPI dispatched. This vulnerability is fixed in 1.84.0.
Weakness: CWE-290
Which versions are affected by CVE-2026-49468?
3 open source packages ship an affected version, including litellm. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
litellm PyPI | All versions | 1.84.0 |
litellm PyPI | All versions | 1.84.0 |
litellm PyPI | All versions | 1.84.0 |
Products include Litellm Litellm.
How do I fix CVE-2026-49468?
Upgrade litellm to 1.84.0 or later.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-49468 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-49468 exists.
Public exploit code: 1 Nuclei template and 1 proofs of concept on GitHub.
Other vulnerabilities in BerriAI litellm
Sources
Also known as CLEANSTART-2026-PO19618, ECHO-472d-a2db-709d, GHSA-4xpc-pv4p-pm3w, MINI-2933-9pph-9xwj, MINI-3hvp-r9fc-rpxp, MINI-447f-xq53-g887 and 4 more.