LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.7-stable, LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives, allowing an authenticated user with access to LiteLLM LLM API routes or a key whose allowed_routes includes /v1/skills, anthropic_routes, or llm_api_routes to upload a crafted skill archive containing path traversal entries that could be written outside the intended extraction or staging directory. This issue is fixed in version 1.83.7-stable.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to
    1.83.7-stable, LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded
    skill ZIP archives, allowing an authenticated user with access to LiteLLM LLM API routes or a key whose
    allowed_routes includes /v1/skills, anthropic_routes, or llm_api_routes to upload a crafted skill archive
    containing path traversal entries that could be written outside the intended extraction or staging
    directory. This issue is fixed in version 1.83.7-stable. (CVE-2026-59820)

ID	Name	Product	Family	Type	Severity
458980	Echo: litellm: security update to 1.83.7	Tenable Cloud Security	Echo Local Security Checks	Local	medium
458980	Echo: litellm: security update to 1.83.7	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
445189	SCA: security update for litellm (GHSA-5jmr-gcrj-2c9q)	Tenable Cloud Security	SCA Checks	Local	medium
445189	SCA: security update for litellm (GHSA-5jmr-gcrj-2c9q)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-59820

medium

Tenable Plugins

medium

medium

medium

medium