CVE-2026-49468

LiteLLM is a proxy server (AI Gateway) for calling LLM APIs. A host-header parsing flaw could allow authentication bypass by making the auth gate evaluate a different route than dispatched, effectively bypassing access controls under specific conditions. The issue is mitigated by upgrading to 1.8...

pyspark-ai (>=0.1.0, <=0.1.12), spark-llm (>=0.1.4, <=0.1.9) potentially affected by CVE-2026-55443 via langchain (0.0.201)

langchain PYPI version 0.0.201 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - pyspark-ai =0.1.0, =0.1.4, =0.1.9 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

dlsite-recommendation-llm (0.0.0), scrapegraphai (>=0.0.1, <=0.0.9) potentially affected by CVE-2026-55443 via langchain (0.1.6)

langchain PYPI version 0.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - dlsite-recommendation-llm 0.0.0 - scrapegraphai =0.0.1, =0.0.9 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

gpt4docs (>=0.1.0, <=0.2.0), llm-repl (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-55443 via langchain (0.0.261)

langchain PYPI version 0.0.261 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - gpt4docs =0.1.0, =1.0.0, =1.0.1 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

git-llm (>=0.1.0, <=0.1.3) potentially affected by CVE-2026-55443 via langchain (0.0.184)

langchain PYPI version 0.0.184 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - git-llm =0.1.0, =0.1.3 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

idoctorai (>=0.8.4, <=0.8.7), llm-monitor (>=0.8.0, <=0.14.0) potentially affected by CVE-2026-55443 via langchain (0.0.299)

langchain PYPI version 0.0.299 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - idoctorai =0.8.4, =0.8.0, =0.14.0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

django-llm (>=0.1.0, <=0.1.3), qabot (0.2.10) potentially affected by CVE-2026-55443 via langchain (0.0.121)

langchain PYPI version 0.0.121 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - django-llm =0.1.0, =0.1.3 - qabot 0.2.10 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

gpt3discord (>=11.2.2, <=11.2.6), llm-repl (0.0.2) +1 more potentially affected by CVE-2026-55443 via langchain (0.0.133)

langchain PYPI version 0.0.133 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - gpt3discord =11.2.2, =1.2.22, =1.3.11 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

agentlite-llm (0.1.12), code-rl (>=0.0.7, <=0.0.9) +2 more potentially affected by CVE-2026-55443 via langchain (0.1.3)

langchain PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - agentlite-llm 0.1.12 - code-rl =0.0.7, =0.0.9 - span-explain 0.1.0 - zigent 0.0.1 Source cves: CVE-2026-55443 Source advisory:...

raft-llm (>=0.1.1, <=0.1.6), ragbuilder (>=0.1.0, <=0.1.5) potentially affected by CVE-2026-55443 via langchain (0.2.9)

langchain PYPI version 0.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - raft-llm =0.1.1, =0.1.0, =0.1.5 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

devtale (>=0.1.2, <=0.1.4), gitmaid (0.1.0) +3 more potentially affected by CVE-2026-55443 via langchain (0.0.251)

langchain PYPI version 0.0.251 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - devtale =0.1.2, =0.1.0, =0.4.0, =0.5.0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

llm-strategy (>=0.0.1.dev0, <=0.0.2) potentially affected by CVE-2026-55443 via langchain (0.0.42)

langchain PYPI version 0.0.42 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - llm-strategy =0.0.1.dev0, =0.0.2 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

biochatter (>=0.1.8, <=0.1.18), structure-llm (0.1.0) potentially affected by CVE-2026-55443 via langchain (0.0.147)

langchain PYPI version 0.0.147 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - biochatter =0.1.8, =0.1.18 - structure-llm 0.1.0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

custom-chat-gpt (0.3.0), furchain (>=0.1.0, <=0.1.6) +6 more potentially affected by CVE-2026-55443 via langchain (0.1.4)

langchain PYPI version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - custom-chat-gpt 0.3.0 - furchain =0.1.0, =0.6.0, =0.8.0 - vocode 0.1.112a0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

llm-bot (>=0.1.1, <=0.1.3) potentially affected by CVE-2026-55443 via langchain (0.0.224)

langchain PYPI version 0.0.224 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - llm-bot =0.1.1, =0.1.3 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

PT-2026-55193

Crawl4AI before 0.8.7 contains a server-side request forgery vulnerability in the /crawl, /crawl/stream, /md, and /llm endpoints that fetch arbitrary user-supplied URLs without validation. Unauthenticated attackers can bypass the internal-address blocklist using IPv6-mapped IPv4 addresses to reac...

LangGenius, Inc. Dify has an SSRF vulnerability (CNVD-C-2026-287908)

Dify is an open-source LLM application development platform. LangGenius, Inc. Dify has an SSRF vulnerability, which allows attackers to obtain sensitive information...

Exploit for SQL Injection in Litellm

CVE-2026-42208 — LiteLLM Pre-Auth SQL Injection Lab A local l...

fair-llm (>=0.2.0, <=0.6.2), geo-importer (>=0.0.1b1, <=0.0.1b914) +4 more potentially affected by CVE-2026-57204 via pypdf (5.6.0)

pypdf PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - fair-llm =0.2.0, =0.0.1b1, =30.0.5, =30.0.7 - textspitter 0.4.0b0 Source cves: CVE-2026-57204 Source advisory: OSV:GHSA-JM82-FX9C-MX94...

PT-2026-50481

Name of the Vulnerable Software and Affected Versions Open-webui affected versions not specified Description An authenticated user can access files belonging to other users by exploiting a lack of ownership verification in the image processing path. When the POST endpoint "/api/chat/completions"...