{"data":{"id":"a5e042ad-8af0-4730-84b8-2b1d85aba7e7","title":"CVE-2026-59820: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.7-stable, LiteLLM…","summary":"LiteLLM, a proxy server (AI Gateway) for calling LLM APIs in OpenAI or native format, prior to 1.83.7-stable does not sufficiently validate file paths during extraction of uploaded Skills ZIP archives. An authenticated user with access to LLM API routes, or a key whose allowed_routes includes /v1/skills, anthropic_routes, or llm_api_routes, can upload a crafted archive with path traversal entries that may be written outside the intended extraction or staging directory.","solution":"Fixed in 1.83.7-stable.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-59820","publishedAt":"2026-07-08T20:16:57.413Z","cveId":"CVE-2026-59820","cweIds":["CWE-22"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["litellm@< 1.83.7 (fixed: 1.83.7)"],"affectedPackageNames":["litellm"],"affectedPackageRefs":["pypi:litellm"],"affectedVendors":[],"affectedVendorsRaw":["LiteLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LiteLLM path traversal in Skills archive extraction via uploaded ZIP","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00587,"epssCheckedAt":"2026-10-14T12:12:43.303Z","kevDateAdded":null,"advisoryAliases":["GHSA-5jmr-gcrj-2c9q"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:46:55.892Z","patchAvailable":true,"disclosureDate":"2026-07-08T20:16:57.413Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}