CVE-2026-59820

Medium

Description

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.7-stable, LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives, allowing an authenticated user with access to LiteLLM LLM API routes or a key whose allowed_routes includes /v1/skills, anthropic_routes, or llm_api_routes to upload a crafted skill archive containing path traversal entries that could be written outside the intended extraction or staging directory. This issue is fixed in version 1.83.7-stable.

SeverityMedium

CVSS6.5

Exploit probability—

ProductLitellm

PublishedJul 8, 2026

First seenJul 8, 2026

Weakness typeCWE-22Path traversal

How to fix

Update

litellm litellm1.83.7 or later
litellm1.83.7 or later

Affected products

Product	Affected versions	Fixed in
litellm litellm	v < 1.83.7, 1.83.7	1.83.7
litellmPyPI	v < 1.83.7	1.83.7

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.