9.8

CVE-2026-49468: berriai litellm Authentication Bypass by Spoofing

CVSS: 9.8v3.1CriticalModified
AliasesGHSA-4xpc-pv4p-pm3wPYSEC-2026-388CGA-2gpp-wwf2-657c
Published 22-06-2026Last modified 15-07-2026
Open JSON

Vulnerability summary

CVE-2026-49468 is a critical (CVSS 9.8) Authentication Bypass by Spoofing vulnerability in berriai litellm. EPSS estimates a 3.03% chance of exploitation in the next 30 days, higher than 87.3% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.1 (NVD)
EPSS score
3.03%
0%100%
Low · +2.22 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 0 · Related 1
CGA-G6CX-6C7P-WP3M

Timeline

  1. 22-06-2026
    PublishedVulnerability first disclosed.
  2. 15-07-2026
    Last modifiedVulnerability information updated.

Description

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, a Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated access to protected management routes. The auth layer derived the effective route from request.url.path in litellm/proxy/auth/auth_utils.py::get_request_route(), which Starlette reconstructs from the Host header. A crafted Host could therefore make the auth gate evaluate a different route from the one FastAPI dispatched. This vulnerability is fixed in 1.84.0.

CVSS metrics

7 scores · 5 sources · 2 versions

EPSS trend

Probability

3.03%

Chance of exploitation in the next 30 days

Percentile

87%

Versus all other CVEs

30-day change

+2.22 pp

From 0.82% on 19-09-2026

19-09-202619-10-2026
EPSS score
3.03%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard2 products
  • airflow-2< 2.11.2-r12
  • airflow-3< 3.2.2-r7
Berriai1 product
Litellm1 product
PyPI1 product
  • litellm< 1.84.0
Wolfi1 product
  • airflow-3< 3.2.2-r7

5 vendors · 6 products

References

11 links
Show all 11 references