CVE-2026-49468 Scanner
CVE-2026-49468 Scanner - Host Header Injection vulnerability in LiteLLM Proxy
Used 9 times · 4.2k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-49468
9.5
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, a Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated access to protected management routes. The auth layer derived the effective route from request.url.path in litellm/proxy/auth/auth_utils.py::get_request_route(), which Starlette reconstructs from the Host header. A crafted Host could therefore make the auth gate evaluate a different route from the one FastAPI dispatched. This vulnerability is fixed in 1.84.0.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
litellmexploit intelligencered hat ansible automation platform 2red hat openshift ai (rhoai)
Updated Nov 6, 2026View on NVD →
S4E scanner
CVE history: litellm
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →