{"data":{"id":"d6c3db4f-9a84-4fc0-bb41-e65c031538f1","title":"CVE-2026-59821: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.0-stable, LiteLLM's…","summary":"CVE-2026-59821 affects LiteLLM, an AI Gateway proxy server, before 1.82.0-stable. Its Custom Code Guardrails production create and update paths skipped the sandboxing and validation applied by the test endpoint, so a privileged user who can create or update guardrails can submit Python code that runs in the LiteLLM proxy environment and may expose secrets available to the process. The weakness is classified as CWE-94, Improper Control of Generation of Code.","solution":"Fixed in version 1.82.0-stable.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-59821","publishedAt":"2026-07-08T20:16:57.547Z","cveId":"CVE-2026-59821","cweIds":["CWE-94"],"cvssScore":null,"cvssSeverity":null,"severity":"low","attackType":["other"],"issueType":"vulnerability","affectedPackages":["litellm@< 1.82.0 (fixed: 1.82.0)"],"affectedPackageNames":["litellm"],"affectedPackageRefs":["pypi:litellm"],"affectedVendors":[],"affectedVendorsRaw":["LiteLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LiteLLM code injection through Custom Code Guardrails create and update","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00904,"epssCheckedAt":"2026-10-14T18:05:58.741Z","kevDateAdded":null,"advisoryAliases":["GHSA-72m8-9m7m-h278"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:46:55.399Z","patchAvailable":true,"disclosureDate":"2026-07-08T20:16:57.547Z","capecIds":["CAPEC-242"],"crossRefCount":2,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}