https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:46:46 +0000 https://cve.radiocsirt.org/vuln/brew-aider-cve-2026-59820 <p><strong>Affected:</strong> Homebrew: aider</p> <p>### Impact</p> <p>LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives. An authenticated user with access to LiteLLM LLM API routes, or a key whose `allowed_routes` includes `/v1/skills`, `anthropic_routes`, or `llm_api_routes`, could upload a crafted skill archive containing path traversal entries.</p> <p>When the skill was processed for execution, those entries could be written outside the intended extraction/staging directory. This could allow arbitrary file write and may lead to code execution depending on deployment configuration and writable paths.</p> <p>### Patches</p> <p>The issue is fixed in `1.83.7-stable`.</p> <p>LiteLLM recommens upgrading to `1.83.7-stable` or later.</p> <p>### Workarounds</p> <p>If upgrading is not immediately possible:</p> <p>1. Block `POST /v1/skills` at your reverse proxy or API gateway. 2. Restrict Skills API access to trusted users only.</p> <p><strong>Affected:</strong> Homebrew: aider</p> <p>### Impact</p> <p>LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives. An authenticated user with access to LiteLLM LLM API routes, or a key whose `allowed_routes` includes `/v1/skills`, `anthropic_routes`, or `llm_api_routes`, could upload a crafted skill archive containing path traversal entries.</p> <p>When the skill was processed for execution, those entries could be written outside the intended extraction/staging directory. This could allow arbitrary file write and may lead to code execution depending on deployment configuration and writable paths.</p> <p>### Patches</p> <p>The issue is fixed in `1.83.7-stable`.</p> <p>LiteLLM recommens upgrading to `1.83.7-stable` or later.</p> <p>### Workarounds</p> <p>If upgrading is not immediately possible:</p> <p>1. Block `POST /v1/skills` at your reverse proxy or API gateway. 2. Restrict Skills API access to trusted users only.</p> https://cve.radiocsirt.org/vuln/brew-aider-cve-2026-59820 https://cve.radiocsirt.org/vuln/euvd-2026-335346 EUVD-2026-335346 https://cve.radiocsirt.org/vuln/euvd-2026-335346 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59820 <p>LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.7-stable, LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives, allowing an authenticated user with access to LiteLLM LLM API routes or a key whose allowed_routes includes /v1/skills, anthropic_routes, or llm_api_routes to upload a crafted skill archive containing path traversal entries that could be written outside the intended extraction or staging directory. This issue is fixed in version 1.83.7-stable.</p> <p>LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.7-stable, LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives, allowing an authenticated user with access to LiteLLM LLM API routes or a key whose allowed_routes includes /v1/skills, anthropic_routes, or llm_api_routes to upload a crafted skill archive containing path traversal entries that could be written outside the intended extraction or staging directory. This issue is fixed in version 1.83.7-stable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-59820 https://cve.radiocsirt.org/vuln/ghsa-5jmr-gcrj-2c9q <p><strong>Affected:</strong> PyPI: litellm</p> <p>### Impact</p> <p>LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives. An authenticated user with access to LiteLLM LLM API routes, or a key whose `allowed_routes` includes `/v1/skills`, `anthropic_routes`, or `llm_api_routes`, could upload a crafted skill archive containing path traversal entries.</p> <p>When the skill was processed for execution, those entries could be written outside the intended extraction/staging directory. This could allow arbitrary file write and may lead to code execution depending on deployment configuration and writable paths.</p> <p>### Patches</p> <p>The issue is fixed in `1.83.7-stable`.</p> <p>LiteLLM recommens upgrading to `1.83.7-stable` or later.</p> <p>### Workarounds</p> <p>If upgrading is not immediately possible:</p> <p>1. Block `POST /v1/skills` at your reverse proxy or API gateway. 2. Restrict Skills API access to trusted users only.</p> <p><strong>Affected:</strong> PyPI: litellm</p> <p>### Impact</p> <p>LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives. An authenticated user with access to LiteLLM LLM API routes, or a key whose `allowed_routes` includes `/v1/skills`, `anthropic_routes`, or `llm_api_routes`, could upload a crafted skill archive containing path traversal entries.</p> <p>When the skill was processed for execution, those entries could be written outside the intended extraction/staging directory. This could allow arbitrary file write and may lead to code execution depending on deployment configuration and writable paths.</p> <p>### Patches</p> <p>The issue is fixed in `1.83.7-stable`.</p> <p>LiteLLM recommens upgrading to `1.83.7-stable` or later.</p> <p>### Workarounds</p> <p>If upgrading is not immediately possible:</p> <p>1. Block `POST /v1/skills` at your reverse proxy or API gateway. 2. Restrict Skills API access to trusted users only.</p> https://cve.radiocsirt.org/vuln/ghsa-5jmr-gcrj-2c9q https://cve.radiocsirt.org/vuln/pysec-2026-3477 <p><strong>Affected:</strong> PyPI: litellm</p> <p>### Impact</p> <p>LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives. An authenticated user with access to LiteLLM LLM API routes, or a key whose `allowed_routes` includes `/v1/skills`, `anthropic_routes`, or `llm_api_routes`, could upload a crafted skill archive containing path traversal entries.</p> <p>When the skill was processed for execution, those entries could be written outside the intended extraction/staging directory. This could allow arbitrary file write and may lead to code execution depending on deployment configuration and writable paths.</p> <p>### Patches</p> <p>The issue is fixed in `1.83.7-stable`.</p> <p>LiteLLM recommens upgrading to `1.83.7-stable` or later.</p> <p>### Workarounds</p> <p>If upgrading is not immediately possible:</p> <p>1. Block `POST /v1/skills` at your reverse proxy or API gateway. 2. Restrict Skills API access to trusted users only.</p> <p><strong>Affected:</strong> PyPI: litellm</p> <p>### Impact</p> <p>LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives. An authenticated user with access to LiteLLM LLM API routes, or a key whose `allowed_routes` includes `/v1/skills`, `anthropic_routes`, or `llm_api_routes`, could upload a crafted skill archive containing path traversal entries.</p> <p>When the skill was processed for execution, those entries could be written outside the intended extraction/staging directory. This could allow arbitrary file write and may lead to code execution depending on deployment configuration and writable paths.</p> <p>### Patches</p> <p>The issue is fixed in `1.83.7-stable`.</p> <p>LiteLLM recommens upgrading to `1.83.7-stable` or later.</p> <p>### Workarounds</p> <p>If upgrading is not immediately possible:</p> <p>1. Block `POST /v1/skills` at your reverse proxy or API gateway. 2. Restrict Skills API access to trusted users only.</p> https://cve.radiocsirt.org/vuln/pysec-2026-3477 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2263 <p>Ein Angreifer kann mehrere Schwachstellen in LiteLLM ausnutzen, um Informationen offenzulegen, Daten zu manipulieren, Code auszuführen und um Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in LiteLLM ausnutzen, um Informationen offenzulegen, Daten zu manipulieren, Code auszuführen und um Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2263