StackRadarChart IndexLive demo

CVE-2026-59823

Medium

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.004; 37th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 13; of 17,803 indexed, latest versions
Container images: 13; deployed by those charts
Fix available: 1 of 1; affected package

LiteLLM Proxy has server-side request forgery via the `user_config` request parameter

Carried by container images the latest versions of 13 of 17,803 indexed charts deploy, on 13 images.

Affected package	Affected versions	Fixed in	Images
litellmpypi	1.50.2, 1.51.3, 1.58.2, 1.60.2+9 more	1.83.9	13

OSV records: GHSA-hx8v-g79f-8w5f

Charts affected

13 by stars

Chart

Latest

Affected images

Radar Score

litellmlitellm-helm

1 of 1 See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-59823.

Container image	Digest	Package	Fixed in
ghcr.io/berriai/litellm-database :litellm_stable_release_branch-v1.75.5-stable	ab63d26a8a2c	litellm@1.75.5	1.83.9

Open the chart page →

4,503

kube-acp-stackcloudentity

1 of 7 See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-59823.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	litellm@1.58.2	1.83.9

Open the chart page →

21,109

csghubcsghub

2 of 34 See more

csghub csghub 2.5.0

2 of the 34 container images this version deploys carry CVE-2026-59823.

Container image	Digest	Package	Fixed in
opencsghq/agenticflow :ee-v0.6.5-2	41cba9c366f1	litellm@1.60.2	1.83.9
opencsghq/csgbot :v0.6.9-ee	7d0271e26521	litellm@1.81.1	1.83.9

Open the chart page →

49,929

2 of 10 See more

csgship csghub 0.4.6

2 of the 10 container images this version deploys carry CVE-2026-59823.

Container image	Digest	Package	Fixed in
opencsghq/csgship-agentic :v0.4.0	2cd29671a03e	litellm@1.60.4	1.83.9
opencsghq/csgship-web :v0.4.0	c36a5bac3cf0	litellm@1.51.3	1.83.9

Open the chart page →

11,977

ai-agentdevtron

1 of 1 See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-59823.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	litellm@1.50.2	1.83.9

Open the chart page →

9,743

ai-agentdevtron-labs

1 of 1 See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-59823.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	litellm@1.50.2	1.83.9

Open the chart page →

9,743

difydify

1 of 4 See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-59823.

Container image	Digest	Package	Fixed in
langgenius/dify-api :1.0.0	066035f93856	litellm@1.61.6	1.83.9

Open the chart page →

47,013

aperagkubeblocks

1 of 3 See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-59823.

Container image	Digest	Package	Fixed in
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	litellm@1.80.0	1.83.9

Open the chart page →

8,559

octantisoctantis

1 of 1 See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-59823.

Container image	Digest	Package	Fixed in
ghcr.io/vinny1892/octantis :latest	45459c0910fc	litellm@1.83.0	1.83.9

Open the chart page →

2,618

home-assistantpascaliske

1 of 1 See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-59823.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	litellm@1.80.5	1.83.9

Open the chart page →

4,852

ai-agentromholdings

1 of 1 See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-59823.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	litellm@1.50.2	1.83.9

Open the chart page →

9,743

tandoorrtomik-helm-charts

1 of 1 See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-59823.

Container image	Digest	Package	Fixed in
vabene1111/recipes :2.3.5	0f8d061895e9	litellm@1.64.1	1.83.9

Open the chart page →

4,575

showroom-docs-mcpshowroom-docs-mcp

1 of 4 See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-59823.

Container image	Digest	Package	Fixed in
litellm/litellm-non_root :v1.82.3-stable	09b217802ded	litellm@1.82.3	1.83.9

Open the chart page →

5,301

Container images carrying it

13 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/devtron/ai-agent :0.0.1	6545dac92173	litellm@1.50.2	1.83.9	3
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	litellm@1.80.0	1.83.9	1
langgenius/dify-api :1.0.0	066035f93856	litellm@1.61.6	1.83.9	1
litellm/litellm-non_root :v1.82.3-stable	09b217802ded	litellm@1.82.3	1.83.9	1
opencsghq/agenticflow :ee-v0.6.5-2	41cba9c366f1	litellm@1.60.2	1.83.9	1
opencsghq/csgbot :v0.6.9-ee	7d0271e26521	litellm@1.81.1	1.83.9	1
opencsghq/csgship-agentic :v0.4.0	2cd29671a03e	litellm@1.60.4	1.83.9	1
opencsghq/csgship-web :v0.4.0	c36a5bac3cf0	litellm@1.51.3	1.83.9	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	litellm@1.58.2	1.83.9	1
vabene1111/recipes :2.3.5	0f8d061895e9	litellm@1.64.1	1.83.9	1
ghcr.io/berriai/litellm-database :litellm_stable_release_branch-v1.75.5-stable	ab63d26a8a2c	litellm@1.75.5	1.83.9	1
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	litellm@1.80.5	1.83.9	1
ghcr.io/vinny1892/octantis :latest	45459c0910fc	litellm@1.83.0	1.83.9	1