StackRadar

CVE-2026-84377

Medium

Advisory

Published 30 Sept 2026In the index since 1 Oct 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
21
of 17,966 indexed, latest versions
Container images
20
deployed by those charts
Fix available
1 of 1
affected package

LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

Carried by container images the latest versions of 21 of 17,966 indexed charts deploy, on 20 images.

Affected packageAffected versionsFixed inImages
litellmpypi1.50.2, 1.51.3, 1.58.2, 1.60.2+13 more1.88.6, 1.89.7, 1.93.2, 1.94.320
OSV records
GHSA-3cv6-jpf6-8222

Charts affected

21 by stars
ChartLatestAffected imagesRadar Score
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
langgenius/dify-api:1.16.1dcefa5f7c47c
litellm@1.89.3
1.89.7

Open the chart page →

71,370
observalobservalVerified publisher1.13.11 of 8See more

observal observal 1.13.1

1 of the 8 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
ghcr.io/observal/observal-api:1.13.1153b8b893232
litellm@1.86.2
1.88.6

Open the chart page →

6,417
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
langflowai/langflow:latest79c02794adeb
litellm@1.93.0
1.93.2

Open the chart page →

4,585
langflow-runtimelangflow0.1.11 of 1See more

langflow-runtime langflow 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
langflowai/langflow:latest79c02794adeb
litellm@1.93.0
1.93.2

Open the chart page →

399
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
litellm@1.75.5
1.88.6

Open the chart page →

4,868
opikopikOfficialVerified publisher2.2.861 of 13See more

opik opik 2.2.86

1 of the 13 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
ghcr.io/comet-ml/opik/opik-python-backend:2.2.86c33c891487b3
litellm@1.94.1
1.94.3

Open the chart page →

14,576
kitchenowlchart-kitchenowl0.1.131 of 2See more

kitchenowl chart-kitchenowl 0.1.13

1 of the 2 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.104a7ed693531b
litellm@1.93.0
1.93.2

Open the chart page →

2,983
kube-acp-stackcloudentity2.29.01 of 7See more

kube-acp-stack cloudentity 2.29.0

1 of the 7 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
litellm@1.58.2
1.88.6

Open the chart page →

22,097
csghubcsghubVerified publisher2.5.02 of 34See more

csghub csghub 2.5.0

2 of the 34 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
litellm@1.60.2
1.88.6
opencsghq/csgbot:v0.6.9-ee7d0271e26521
litellm@1.81.1
1.88.6

Open the chart page →

53,831
csgshipcsghubVerified publisher0.4.62 of 10See more

csgship csghub 0.4.6

2 of the 10 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
opencsghq/csgship-agentic:v0.4.02cd29671a03e
litellm@1.60.4
1.88.6
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
litellm@1.51.3
1.88.6

Open the chart page →

12,932
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
litellm@1.50.2
1.88.6

Open the chart page →

10,282
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
litellm@1.50.2
1.88.6

Open the chart page →

10,282
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
litellm@1.61.6
1.88.6

Open the chart page →

55,753
langflowhelmforgeVerified publisher2.0.21 of 1See more

langflow helmforge 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
langflowai/langflow:1.12.334055a07d446
litellm@1.93.0
1.93.2

Open the chart page →

318
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
litellm@1.80.0
1.88.6

Open the chart page →

9,255
octantisoctantis0.1.01 of 1See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
ghcr.io/vinny1892/octantis:latest45459c0910fc
litellm@1.83.0
1.88.6

Open the chart page →

3,033
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest60e83a098ae4
litellm@1.93.0
1.93.2

Open the chart page →

7,423
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
litellm@1.80.5
1.88.6

Open the chart page →

5,410
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
litellm@1.50.2
1.88.6

Open the chart page →

10,282
tandoorrtomik-helm-chartsVerified publisher0.0.11 of 1See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
vabene1111/recipes:2.3.50f8d061895e9
litellm@1.64.1
1.88.6

Open the chart page →

4,795
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-84377.

Container imageDigestPackageFixed in
litellm/litellm-non_root:v1.82.3-stable09b217802ded
litellm@1.82.3
1.88.6

Open the chart page →

5,789

Container images carrying it

20 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/ai-agent:0.0.16545dac92173
litellm@1.50.2
1.88.6
3
langflowai/langflow:latest79c02794adeb
litellm@1.93.0
1.93.2
2
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
litellm@1.80.0
1.88.6
1
langflowai/langflow:1.12.334055a07d446
litellm@1.93.0
1.93.2
1
langgenius/dify-api:1.0.0066035f93856
litellm@1.61.6
1.88.6
1
langgenius/dify-api:1.16.1dcefa5f7c47c
litellm@1.89.3
1.89.7
1
litellm/litellm-non_root:v1.82.3-stable09b217802ded
litellm@1.82.3
1.88.6
1
onyxdotapp/onyx-backend:latest60e83a098ae4
litellm@1.93.0
1.93.2
1
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
litellm@1.60.2
1.88.6
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
litellm@1.81.1
1.88.6
1
opencsghq/csgship-agentic:v0.4.02cd29671a03e
litellm@1.60.4
1.88.6
1
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
litellm@1.51.3
1.88.6
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
litellm@1.58.2
1.88.6
1
tombursch/kitchenowl-backend:v0.7.104a7ed693531b
litellm@1.93.0
1.93.2
1
vabene1111/recipes:2.3.50f8d061895e9
litellm@1.64.1
1.88.6
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
litellm@1.75.5
1.88.6
1
ghcr.io/comet-ml/opik/opik-python-backend:2.2.86c33c891487b3
litellm@1.94.1
1.94.3
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
litellm@1.80.5
1.88.6
1
ghcr.io/observal/observal-api:1.13.1153b8b893232
litellm@1.86.2
1.88.6
1
ghcr.io/vinny1892/octantis:latest45459c0910fc
litellm@1.83.0
1.88.6
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.