LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
Impact
LiteLLM's Custom Code Guardrails production create/update paths did not apply the same sandboxing and validation used by the test endpoint.
A privileged user with access to create or update guardrails could submit custom Python code that executed in the LiteLLM proxy environment. In deployments without a configured master key, callers could be treated as proxy administrators, making this reachable without intended administrative authorization.
This could allow arbitrary code execution in the LiteLLM proxy container and exposure of secrets available to the process.
Patches
The issue is fixed in 1.82.0-stable.
LiteLLM recommend upgrading to 1.82.0-stable or later.
Workarounds
If upgrading is not immediately possible:
- Restrict access to
POST /guardrailsandPUT /guardrails/{guardrail_id}to trusted administrators only. - Ensure
LITELLM_MASTER_KEYis configured. - Avoid enabling Custom Code Guardrails for untrusted users.
Software afectado
Haz clic en una tecnología para ver todas sus vulnerabilidades.
| Plataforma | Paquete | Versiones vulnerables | Corregida en |
|---|---|---|---|
| Python (PyPI) | litellm | < 1.82.0 | 1.82.0 |
Referencias
- https://github.com/BerriAI/litellm/security/advisories/GHSA-72m8-9m7m-h278
- https://nvd.nist.gov/vuln/detail/CVE-2026-59821
- https://github.com/BerriAI/litellm/commit/e50b4486d0f7aa0497185a1ebcdd2c91f1769eba
- https://github.com/BerriAI/litellm
- https://github.com/BerriAI/litellm/releases/tag/v1.82.0-stable
- https://pypi.org/project/litellm
- https://github.com/advisories/GHSA-72m8-9m7m-h278
- Vector CVSS
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N- Debilidad (CWE)
CWE-94- Plataforma
- Python (PyPI)
- Paquete
litellm- Publicada
- 22.07.2026
- Actualizado
- 11.10.2026 15:17
Fuentes y licencias
OSV / GitHub Advisory Database - PYSEC-2026-3478 - PyPA Advisory Database; CC BY 4.0
OSV / GitHub Advisory Database - GHSA-72m8-9m7m-h278 - CC BY 4.0
Historial de vulnerabilidades: litellm
Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.
- Entradas en total
- 42
- Primera → última
- 04.2024 09.2026
- Sin corrección
- 14
- Explotada en ataques
- 3
Distribución por gravedad
- Crítica 7
- Alta 17
- Media 8
- Baja 9
- Sin evaluar 1
Divulgaciones por año
- 2024: 8
- 2025: 6
- 2026: 28
-
LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks esta entrada
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.