| Package | Affected versions | Patched versions |
|---|---|---|
| litellm | < 1.83.7 | 1.83.7 |
| litellm | = 1.83.7< 1.83.7 | 1.83.7 |
LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives. An authenticated user with access to LiteLLM LLM API routes, or a key whose allowed_routes includes /v1/skills, anthropic_routes, or llm_api_routes, could upload a crafted skill archive containing path traversal entries.
When the skill was processed for execution, those entries could be written outside the intended extraction/staging directory. This could allow arbitrary file write and may lead to code execution depending on deployment configuration and writable paths.
The issue is fixed in 1.83.7-stable.
LiteLLM recommens upgrading to 1.83.7-stable or later.
If upgrading is not immediately possible:
POST /v1/skills at your reverse proxy or API gateway.Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free