{"id":239,"date":"2026-10-29T07:25:41","date_gmt":"2026-10-29T07:25:41","guid":{"rendered":"https:\/\/bugskan.com\/?p=239"},"modified":"2026-10-29T07:25:41","modified_gmt":"2026-10-29T07:25:41","slug":"litellm-host-header-authentication-bypass-depended-on-upstream-request-handling","status":"publish","type":"post","link":"https:\/\/bugskan.com\/index.php\/2026\/10\/29\/litellm-host-header-authentication-bypass-depended-on-upstream-request-handling\/","title":{"rendered":"LiteLLM Host-header authentication bypass depended on upstream request handling"},"content":{"rendered":"<p>A LiteLLM advisory describes a Host-header parsing flaw that could cause its authentication layer to evaluate a different route from the one the application served. Under the relevant conditions, protected management routes could become accessible without authentication.<\/p>\n<p>The advisory says most deployments were not affected: upstream components that validated or normalized Host headers blocked the bypass. It specifically excludes LiteLLM Cloud customers.<\/p>\n<p>Version 1.84.0 fixes the issue. Upgrade to a maintained release and check the actual path through your CDN, load balancer and reverse proxy. If updating is delayed, enforce Host validation upstream and restrict direct access to the proxy listener.<\/p>\n<p><a href=\"https:\/\/osv.dev\/vulnerability\/GHSA-4xpc-pv4p-pm3w\">Read the original source<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE-2026-49468 affected certain proxy deployments; the advisory says LiteLLM Cloud was not affected.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"bugskan_incident_id":"inc_489d75aa490013","bugskan_event_type":"vulnerability","bugskan_response":"REVIEW","bugskan_technical_severity":"","bugskan_technical_severity_source":"","bugskan_evidence_quality":"high","bugskan_affected_scope":"Affected self-hosted LiteLLM deployments without protective upstream Host handling.","bugskan_recommended_next_step":"Update LiteLLM and enforce valid Host headers before requests reach the proxy.","bugskan_who_should_check":"","bugskan_material_updated_at":"2026-06-16T00:00:00Z","bugskan_reviewer_name":"","bugskan_reviewed_at":"","bugskan_legacy_state":"mapped","bugskan_featured":false,"bugskan_sample":false,"footnotes":""},"categories":[1],"tags":[],"bugskan_format":[2],"bugskan_technology":[21],"class_list":["post-239","post","type-post","status-publish","format-standard","hentry","category-uncategorized","bugskan_format-security-brief","bugskan_technology-litellm"],"_links":{"self":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/239","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/comments?post=239"}],"version-history":[{"count":1,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/239\/revisions"}],"predecessor-version":[{"id":393,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/239\/revisions\/393"}],"wp:attachment":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/media?parent=239"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/categories?post=239"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/tags?post=239"},{"taxonomy":"bugskan_format","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_format?post=239"},{"taxonomy":"bugskan_technology","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_technology?post=239"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}