CyberRota Analysis
AI-GeneratedLiteLLM versions prior to 1.83.7-stable are vulnerable to path traversal attacks due to inadequate validation of file paths in uploaded skill ZIP archives. This flaw allows authenticated users to upload malicious skill archives that can extract files outside the designated directories, potentially leading to unauthorized access or data exposure. Organizations using LiteLLM, particularly those with access to LLM API routes, should prioritize upgrading to the latest version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.7-stable, LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives, allowing an authenticated user with access to LiteLLM LLM API routes or a key whose allowed_routes includes /v1/skills, anthropic_routes, or llm_api_routes to upload a crafted skill archive containing path traversal entries that could be written outside the intended extraction or staging directory. This issue is fixed in version 1.83.7-stable.
Related CVEs
Other vulnerabilities affecting the same vendor(s)