CVE-2026-59820: litellm before 1.83.7 (exclusive), 1.83.7 · update rc1, < 1.83.7-stable

Affected technology

litellm · before 1.83.7 (exclusive)
litellm

litellm · 1.83.7 · update rc1
litellm

litellm · < 1.83.7-stable
BerriAI

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authenticated user with access can LiteLLM LLM API routes or a key whose allowed_routes includes /v1/skills, anthropic_routes, or llm_api_routes to upload a crafted skill archive containing path traversal entries that could be written outside the intended extraction or staging directory. Vendor/CNA’s CVSS 4.0 assessment (base score 6.1/10) rates confidentiality impact as none; integrity and availability impact as high.