StackRadarChart IndexLive demo

CVE-2026-49468

Critical

Advisory

Published 16 Jun 2026In the index since 8 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 14; of 17,781 indexed, latest versions
Container images: 14; deployed by those charts
Fix available: 1 of 1; affected package

LiteLLM: Authentication Bypass via Host Header Injection

Carried by container images the latest versions of 14 of 17,781 indexed charts deploy, on 14 images.

Affected package	Affected versions	Fixed in	Images
litellmpypi	1.50.2, 1.51.3, 1.58.2, 1.60.2+10 more	1.84.0	14

OSV records: GHSA-4xpc-pv4p-pm3w
Also known as: PYSEC-2026-388

Charts affected

14 by stars

Chart

Latest

Affected images

Radar Score

litellmlitellm-helm

1 of 1 See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-49468.

Container image	Digest	Package	Fixed in
ghcr.io/berriai/litellm-database :litellm_stable_release_branch-v1.75.5-stable	ab63d26a8a2c	litellm@1.75.5	1.84.0

Open the chart page →

4,292

kitchenowlchart-kitchenowl

1 of 2 See more

kitchenowl chart-kitchenowl 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-49468.

Container image	Digest	Package	Fixed in
tombursch/kitchenowl-backend :v0.7.8	b48e4ab727cd	litellm@1.83.14	1.84.0

Open the chart page →

4,803

kube-acp-stackcloudentity

1 of 7 See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-49468.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	litellm@1.58.2	1.84.0

Open the chart page →

20,900

csghubcsghub

2 of 34 See more

csghub csghub 2.4.3

2 of the 34 container images this version deploys carry CVE-2026-49468.

Container image	Digest	Package	Fixed in
opencsghq/agenticflow :ee-v0.6-5	2f03fead54db	litellm@1.60.2	1.84.0
opencsghq/csgbot :v0.6.7-ee	af7191a9cf8a	litellm@1.81.1	1.84.0

Open the chart page →

58,897

2 of 10 See more

csgship csghub 0.4.6

2 of the 10 container images this version deploys carry CVE-2026-49468.

Container image	Digest	Package	Fixed in
opencsghq/csgship-agentic :v0.4.0	2cd29671a03e	litellm@1.60.4	1.84.0
opencsghq/csgship-web :v0.4.0	c36a5bac3cf0	litellm@1.51.3	1.84.0

Open the chart page →

11,335

ai-agentdevtron

1 of 1 See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-49468.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	litellm@1.50.2	1.84.0

Open the chart page →

9,607

ai-agentdevtron-labs

1 of 1 See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-49468.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	litellm@1.50.2	1.84.0

Open the chart page →

9,607

difydify

1 of 4 See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-49468.

Container image	Digest	Package	Fixed in
langgenius/dify-api :1.0.0	066035f93856	litellm@1.61.6	1.84.0

Open the chart page →

19,224

aperagkubeblocks

1 of 3 See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-49468.

Container image	Digest	Package	Fixed in
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	litellm@1.80.0	1.84.0

Open the chart page →

8,405

octantisoctantis

1 of 1 See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-49468.

Container image	Digest	Package	Fixed in
ghcr.io/vinny1892/octantis :latest	45459c0910fc	litellm@1.83.0	1.84.0

Open the chart page →

2,555

home-assistantpascaliske

1 of 1 See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-49468.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	litellm@1.80.5	1.84.0

Open the chart page →

4,749

ai-agentromholdings

1 of 1 See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-49468.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	litellm@1.50.2	1.84.0

Open the chart page →

9,607

tandoorrtomik-helm-charts

1 of 1 See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-49468.

Container image	Digest	Package	Fixed in
vabene1111/recipes :2.3.5	0f8d061895e9	litellm@1.64.1	1.84.0

Open the chart page →

4,499

showroom-docs-mcpshowroom-docs-mcp

1 of 4 See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-49468.

Container image	Digest	Package	Fixed in
litellm/litellm-non_root :v1.82.3-stable	09b217802ded	litellm@1.82.3	1.84.0

Open the chart page →

5,201

Container images carrying it

14 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/devtron/ai-agent :0.0.1	6545dac92173	litellm@1.50.2	1.84.0	3
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	litellm@1.80.0	1.84.0	1
langgenius/dify-api :1.0.0	066035f93856	litellm@1.61.6	1.84.0	1
litellm/litellm-non_root :v1.82.3-stable	09b217802ded	litellm@1.82.3	1.84.0	1
opencsghq/agenticflow :ee-v0.6-5	2f03fead54db	litellm@1.60.2	1.84.0	1
opencsghq/csgbot :v0.6.7-ee	af7191a9cf8a	litellm@1.81.1	1.84.0	1
opencsghq/csgship-agentic :v0.4.0	2cd29671a03e	litellm@1.60.4	1.84.0	1
opencsghq/csgship-web :v0.4.0	c36a5bac3cf0	litellm@1.51.3	1.84.0	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	litellm@1.58.2	1.84.0	1
tombursch/kitchenowl-backend :v0.7.8	b48e4ab727cd	litellm@1.83.14	1.84.0	1
vabene1111/recipes :2.3.5	0f8d061895e9	litellm@1.64.1	1.84.0	1
ghcr.io/berriai/litellm-database :litellm_stable_release_branch-v1.75.5-stable	ab63d26a8a2c	litellm@1.75.5	1.84.0	1
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	litellm@1.80.5	1.84.0	1
ghcr.io/vinny1892/octantis :latest	45459c0910fc	litellm@1.83.0	1.84.0	1