https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:28:38.490413+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-aider-cve-2026-59820 BREW-aider-CVE-2026-59820 — LiteLLM: Arbitrary file write via path traversal in Skills archive extraction 2026-10-04T20:28:38.601362+00:00

Affected: Homebrew: aider

### Impact

LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives. An authenticated user with access to LiteLLM LLM API routes, or a key whose `allowed_routes` includes `/v1/skills`, `anthropic_routes`, or `llm_api_routes`, could upload a crafted skill archive containing path traversal entries.

When the skill was processed for execution, those entries could be written outside the intended extraction/staging directory. This could allow arbitrary file write and may lead to code execution depending on deployment configuration and writable paths.

### Patches

The issue is fixed in `1.83.7-stable`.

LiteLLM recommens upgrading to `1.83.7-stable` or later.

### Workarounds

If upgrading is not immediately possible:

1. Block `POST /v1/skills` at your reverse proxy or API gateway. 2. Restrict Skills API access to trusted users only.

 https://cve.radiocsirt.org/vuln/euvd-2026-335346 EUVD-2026-335346 2026-10-04T20:28:38.601451+00:00 EUVD-2026-335346 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59820 fkie_cve-2026-59820 2026-10-04T20:28:38.601476+00:00

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.7-stable, LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives, allowing an authenticated user with access to LiteLLM LLM API routes or a key whose allowed_routes includes /v1/skills, anthropic_routes, or llm_api_routes to upload a crafted skill archive containing path traversal entries that could be written outside the intended extraction or staging directory. This issue is fixed in version 1.83.7-stable.

 https://cve.radiocsirt.org/vuln/ghsa-5jmr-gcrj-2c9q GHSA-5jmr-gcrj-2c9q — LiteLLM: Arbitrary file write via path traversal in Skills archive extraction 2026-10-04T20:28:38.601518+00:00

Affected: PyPI: litellm

### Impact

LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives. An authenticated user with access to LiteLLM LLM API routes, or a key whose `allowed_routes` includes `/v1/skills`, `anthropic_routes`, or `llm_api_routes`, could upload a crafted skill archive containing path traversal entries.

When the skill was processed for execution, those entries could be written outside the intended extraction/staging directory. This could allow arbitrary file write and may lead to code execution depending on deployment configuration and writable paths.

### Patches

The issue is fixed in `1.83.7-stable`.

LiteLLM recommens upgrading to `1.83.7-stable` or later.

### Workarounds

If upgrading is not immediately possible:

1. Block `POST /v1/skills` at your reverse proxy or API gateway. 2. Restrict Skills API access to trusted users only.

 https://cve.radiocsirt.org/vuln/pysec-2026-3477 PYSEC-2026-3477 — LiteLLM: Arbitrary file write via path traversal in Skills archive extraction 2026-10-04T20:28:38.601594+00:00

Affected: PyPI: litellm

### Impact

LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives. An authenticated user with access to LiteLLM LLM API routes, or a key whose `allowed_routes` includes `/v1/skills`, `anthropic_routes`, or `llm_api_routes`, could upload a crafted skill archive containing path traversal entries.

When the skill was processed for execution, those entries could be written outside the intended extraction/staging directory. This could allow arbitrary file write and may lead to code execution depending on deployment configuration and writable paths.

### Patches

The issue is fixed in `1.83.7-stable`.

LiteLLM recommens upgrading to `1.83.7-stable` or later.

### Workarounds

If upgrading is not immediately possible:

1. Block `POST /v1/skills` at your reverse proxy or API gateway. 2. Restrict Skills API access to trusted users only.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2263 WID-SEC-W-2026-2263 — LiteLLM: Mehrere Schwachstellen 2026-10-04T20:28:38.601660+00:00

Ein Angreifer kann mehrere Schwachstellen in LiteLLM ausnutzen, um Informationen offenzulegen, Daten zu manipulieren, Code auszuführen und um Sicherheitsmaßnahmen zu umgehen.