HighVulnerabilityLLM-specific
CVE-2026-59820: LiteLLM path traversal in Skills archive extraction via uploaded ZIP
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-59820
- Published
- Record updated
- Affected
- litellm < 1.83.7
- Fixed in
- 1.83.7
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.6%
Summary
LiteLLM, a proxy server (AI Gateway) for calling LLM APIs in OpenAI or native format, prior to 1.83.7-stable does not sufficiently validate file paths during extraction of uploaded Skills ZIP archives. An authenticated user with access to LLM API routes, or a key whose allowed_routes includes /v1/skills, anthropic_routes, or llm_api_routes, can upload a crafted archive with path traversal entries that may be written outside the intended extraction or staging directory.
Mitigation
Fixed in 1.83.7-stable.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- litellmPyPILLM dependency since 2023-07-27 · 54 tracked dependents
Related items
- LowFBI arrests Saudi OpenAI employee who allegedly planted recording device in conference roomSimilar attack · CNBC Technology
- MediumVisual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)Similar attack · Embrace The Red
- LowAnthropic warns self-replicating AI could spread to your smart devicesSimilar attack · BleepingComputer
- InfoAnthropic Warns Small AI Models Could Soon Form Self-Propagating IoT BotnetsSimilar attack · The Hacker News
- InfoAgent Baseline Publishes Security Reference Architecture for Software FactoriesSimilar attack · Socket Blog