CVE-2026-49468: LiteLLM Authentication Bypass via Host Header
CVE-2026-49468 is a critical-severity authentication bypass issue in litellm, a package. Affected: <1.84.0. Fixed in 1.84.0.
Is litellm running on your developers' machines? Anomity inventories the AI agents, MCP servers, extensions and skills on every developer device, so you can see what this advisory touches. Detect this across your developers' devices with Anomity →
Key facts
- ID
CVE-2026-49468- Severity
- critical
- Attack type
- Authentication bypass
- Component
- litellm · package
- Package
litellm- Known exploited
- No known exploitation
- Published
- Last verified
What is CVE-2026-49468?
A critical authentication-bypass flaw in LiteLLM versions prior to 1.84.0 stems from improper handling of Host headers in the auth layer, letting an unauthenticated attacker reach protected management endpoints under certain deployments. Exploitation requires sending crafted HTTP requests directly to a vulnerable LiteLLM proxy not protected by upstream Host-header validation.
Affected versions
| Affected | Fixed in |
|---|---|
<1.84.0 | 1.84.0 |
Am I affected by CVE-2026-49468?
You are affected if you run litellm <1.84.0. Versions 1.84.0 and later include the fix.
How do I fix CVE-2026-49468?
Upgrade LiteLLM to 1.84.0+. Put the proxy behind a gateway that validates/normalizes the Host header, and never expose the LiteLLM admin endpoints directly to untrusted networks.