{"id":"CVE-2026-59821","aliases":["EUVD-2026-42350","GHSA-72m8-9m7m-h278","PYSEC-2026-3478"],"status":"published","title":"LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks","description":"LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.0-stable, LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the test endpoint, allowing a privileged user with access to create or update guardrails to submit custom Python code that executed in the LiteLLM proxy environment and could expose secrets available to the process. This issue is fixed in version 1.82.0-stable.","severity":{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00904,"percentile":0.6027,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-94"],"published":"2026-07-08T19:14:13Z","modified":"2026-10-28T02:31:02Z","fixes":[{"ecosystem":"PyPI","package":"litellm","fixed_in":["1.82.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"litellm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.82.0"}]}]},{"source":"osv","ecosystem":"PyPI","package":"litellm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.82.0"}]}],"versions":["0.1.0","0.1.1","0.1.2","0.1.201","0.1.202","0.1.203","0.1.204","0.1.205","0.1.206","0.1.207","0.1.208","0.1.209","0.1.210","0.1.211","0.1.212","0.1.213","0.1.214","0.1.215","0.1.216","0.1.217","0.1.218","0.1.219","0.1.220","0.1.221","0.1.222","0.1.223","0.1.224","0.1.225","0.1.226","0.1.227","0.1.228","0.1.229","0.1.2291","0.1.230","0.1.231","0.1.232","0.1.233","0.1.234","0.1.235","0.1.236","0.1.237","0.1.238","0.1.3","0.1.31","0.1.32","0.1.330","0.1.331","0.1.34","0.1.341","0.1.343","0.1.345","0.1.347","0.1.348","0.1.349","0.1.351","0.1.352","0.1.353","0.1.354","0.1.356","0.1.360","0.1.361","0.1.362","0.1.363","0.1.364","0.1.365","0.1.366","0.1.367","0.1.368","0.1.369","0.1.370","0.1.371","0.1.372","0.1.373","0.1.375","0.1.376","0.1.379","0.1.380","0.1.381","0.1.383","0.1.384","0.1.385","0.1.386","0.1.387","0.1.388","0.1.389","0.1.392","0.1.393","0.1.394","0.1.398","0.1.399","0.1.400","0.1.401","0.1.402","0.1.403","0.1.404","0.1.405","0.1.410","0.1.411","0.1.412","0.1.415","0.1.419","0.1.420","0.1.421","0.1.422","0.1.424","0.1.425","0.1.426","0.1.429","0.1.433","0.1.434","0.1.435","0.1.436","0.1.437","0.1.438","0.1.439","0.1.440","0.1.441","0.1.442","0.1.443","0.1.444","0.1.445","0.1.446","0.1.447","0.1.448","0.1.449","0.1.450","0.1.451","0.1.452","0.1.456","0.1.457","0.1.459","0.1.460","0.1.461","0.1.464","0.1.465","0.1.475","0.1.477","0.1.479","0.1.480","0.1.481","0.1.482","0.1.486","0.1.487","0.1.488","0.1.490","0.1.491","0.1.492","0.1.493","0.1.494","0.1.495","0.1.497","0.1.500","0.1.501","0.1.504","0.1.507","0.1.508","0.1.509","0.1.510","0.1.511","0.1.512","0.1.516","0.1.517","0.1.518","0.1.520","0.1.525","0.1.530","0.1.531","0.1.533","0.1.535","0.1.536","0.1.537","0.1.538","0.1.544","0.1.546","0.1.547","0.1.548","0.1.549","0.1.550","0.1.551","0.1.552","0.1.553","0.1.554","0.1.555","0.1.556","0.1.557","0.1.558","0.1.559","0.1.560","0.1.561","0.1.562","0.1.563","0.1.567","0.1.568","0.1.569","0.1.570","0.1.574","0.1.578","0.1.580","0.1.582","0.1.583","0.1.585","0.1.586","0.1.587","0.1.590","0.1.591","0.1.593","0.1.595","0.1.596","0.1.597","0.1.598","0.1.600","0.1.601","0.1.604","0.1.605","0.1.607","0.1.609","0.1.610","0.1.615","0.1.618","0.1.619","0.1.620","0.1.621","0.1.623","0.1.624","0.1.625","0.1.626","0.1.629","0.1.630","0.1.631","0.1.632","0.1.634","0.1.635","0.1.636","0.1.638","0.1.639","0.1.641","0.1.642","0.1.643","0.1.644","0.1.645","0.1.646","0.1.647","0.1.648","0.1.649","0.1.650","0.1.651","0.1.652","0.1.674","0.1.680","0.1.681","0.1.683","0.1.685","0.1.686","0.1.687","0.1.689","0.1.690","0.1.692","0.1.693","0.1.696","0.1.697","0.1.698","0.1.700","0.1.700.dev0","0.1.700.dev1","0.1.700.dev2","0.1.700.dev3","0.1.700.dev4","0.1.700.dev5","0.1.702","0.1.704","0.1.706","0.1.714","0.1.714.dev1","0.1.715","0.1.716","0.1.719","0.1.720","0.1.721","0.1.723","0.1.724","0.1.729","0.1.736","0.1.738","0.1.743","0.1.745","0.1.746","0.1.747","0.1.748","0.1.749","0.1.750","0.1.751","0.1.758","0.1.765","0.1.769","0.1.7701","0.1.7713","0.1.772","0.1.774","0.1.780","0.1.781","0.1.784","0.1.786","0.1.788","0.1.789","0.1.793","0.1.794","0.1.805","0.1.806","0.1.807","0.1.813","0.1.814","0.1.815","0.1.816","0.1.817","0.1.818","0.1.819","0.1.820","0.1.821","0.1.824","0.10.0","0.10.1","0.11.1","0.12.10","0.12.11","0.12.12","0.12.4","0.12.4.dev1","0.12.4.dev2","0.12.5","0.12.5.dev1","0.12.7","0.12.7.dev1","0.12.8","0.12.9","0.13.0","0.13.1","0.13.1.dev1","0.13.1.dev2","0.13.1.dev3","0.13.2","0.13.2.dev1","0.13.3.dev1","0.13.3.dev2","0.13.6.dev1","0.13.6.dev2","0.13.6.dev3","0.13.7.dev1","0.14.0","0.14.0.dev1","0.14.1","0.2.5","0.2.6","0.3.0","0.3.1","0.4.0","0.4.4","0.5.2","0.5.3","0.5.4","0.5.6","0.6.0","0.6.1","0.6.2","0.6.6","0.7.1","0.7.1.dev1","0.7.1.dev2","0.7.1.dev3","0.7.10","0.7.3","0.7.4","0.7.5","0.7.9","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.8.5","0.8.6","0.9.0","0.9.1","0.9.2","0.9.2.dev1","1.0.0","1.0.0.dev1","1.0.3","1.0.3.dev1","1.1.0","1.1.1","1.1.2","1.1.3","1.10.0","1.10.1","1.10.10","1.10.11","1.10.2","1.10.3","1.10.4","1.10.6","1.10.8","1.10.9","1.10.dev11","1.11.0","1.11.1","1.12.0","1.12.1","1.12.2","1.12.3","1.12.5","1.12.5.dev1","1.12.6.dev1","1.12.6.dev2","1.12.6.dev3","1.12.6.dev4","1.12.6.dev5","1.13.2","1.14.0","1.14.0.dev1","1.14.1","1.14.2","1.14.3","1.14.4","1.2.0","1.3.1","1.3.3","1.3.3.dev1","1.3.3.dev2","1.3.3.dev3","1.4.0","1.53.1","1.53.1.dev1","1.53.2","1.53.3","1.53.4","1.53.5","1.53.6","1.53.7","1.53.8","1.53.9","1.54.0","1.54.1","1.55.0","1.55.1","1.55.10","1.55.11","1.55.12","1.55.2","1.55.3","1.55.4","1.55.6","1.55.7","1.55.8","1.55.9","1.56.10","1.56.2","1.56.3","1.56.4","1.56.5","1.56.6","1.56.8","1.56.8.dev4","1.56.8.dev5","1.56.8.dev6","1.56.8.dev7","1.56.9","1.57.0","1.57.1","1.57.10","1.57.11","1.57.2","1.57.3","1.57.4","1.57.5","1.57.7","1.57.7.dev1","1.57.8","1.58.0","1.58.1","1.58.2","1.58.4","1.59.0","1.59.1","1.59.1.dev1","1.59.10","1.59.10.dev1","1.59.12","1.59.2","1.59.3","1.59.5","1.59.6","1.59.7","1.59.8","1.59.9","1.6.0","1.60.0","1.60.2","1.60.4","1.60.5","1.60.6","1.60.7","1.60.8","1.60.9","1.61.0","1.61.0.dev1","1.61.1","1.61.11","1.61.13","1.61.15","1.61.16","1.61.17","1.61.19","1.61.2","1.61.20","1.61.3","1.61.4","1.61.5","1.61.6","1.61.7","1.61.8","1.61.9","1.62.1","1.62.4","1.63.0","1.63.0.dev12","1.63.11","1.63.11.dev1","1.63.12","1.63.14","1.63.2","1.63.3","1.63.4.dev1","1.63.5","1.63.6","1.63.7","1.63.8","1.64.1","1.65.0","1.65.0.post1","1.65.1","1.65.3","1.65.4","1.65.4.post1","1.65.5","1.65.6","1.65.7","1.65.8","1.66.0","1.66.1","1.66.2","1.66.3","1.67.0","1.67.0.post1","1.67.1","1.67.2","1.67.4","1.67.4.dev1","1.67.4.post1","1.67.5","1.67.6","1.68.0","1.68.1","1.68.1.dev1","1.68.2","1.69.0","1.69.1","1.69.2","1.69.3","1.7.1","1.7.11","1.7.12","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","1.7.9","1.70.0","1.70.2","1.70.4","1.71.0","1.71.1","1.71.2","1.71.3","1.72.0","1.72.1","1.72.2","1.72.2.post1","1.72.3","1.72.4","1.72.5.dev1","1.72.5.dev2","1.72.5.dev3","1.72.6","1.72.6.post1","1.72.6.post2","1.72.7","1.72.7.dev1","1.72.7.dev7","1.72.9","1.73.0","1.73.0.post1","1.73.0rc1","1.73.1","1.73.2","1.73.6","1.73.6.post1","1.73.6rc2","1.73.7","1.73.7.dev1","1.73.7.dev2","1.73.7.dev3","1.73.7.dev4","1.74.0","1.74.0.post1","1.74.0.post2","1.74.1","1.74.12","1.74.14","1.74.15","1.74.15.post1","1.74.15.post2","1.74.2","1.74.3","1.74.3.post1","1.74.3rc1","1.74.3rc2","1.74.3rc3","1.74.4","1.74.4.dev1","1.74.6","1.74.7","1.74.7.post1","1.74.7.post2","1.74.7rc1","1.74.8","1.74.8.dev2","1.74.9","1.74.9.dev1","1.74.9.dev2","1.74.9.post1","1.74.9.post2","1.75.0","1.75.2","1.75.3","1.75.4","1.75.5.post1","1.75.5.post2","1.75.6","1.75.7","1.75.8","1.75.9","1.76.0","1.76.1","1.76.2","1.76.3","1.77.0","1.77.1","1.77.2.post1","1.77.3","1.77.4","1.77.4.dev1","1.77.5","1.77.7","1.78.0","1.78.0rc2","1.78.2","1.78.3","1.78.4","1.78.5","1.78.6","1.78.7","1.79.0","1.79.0.dev1","1.79.0.dev2","1.79.0.dev3","1.79.1","1.79.2","1.79.3","1.79.3.dev8","1.8.1","1.80.0","1.80.10","1.80.11","1.80.12","1.80.13","1.80.15","1.80.16","1.80.17","1.80.5","1.80.6","1.80.7","1.80.8","1.80.9","1.81.0","1.81.1","1.81.10","1.81.11","1.81.12","1.81.13","1.81.14","1.81.15","1.81.16","1.81.3","1.81.4","1.81.5","1.81.6","1.81.7","1.81.8","1.81.9","1.81.9.dev1","1.9.0","1.9.1","1.9.2","1.9.3","1.9.4","1.9.5","1.9.dev0"]},{"source":"osv","ecosystem":"PyPI","package":"litellm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.82.0"}]}],"versions":["0.1.0","0.1.1","0.1.2","0.1.201","0.1.202","0.1.203","0.1.204","0.1.205","0.1.206","0.1.207","0.1.208","0.1.209","0.1.210","0.1.211","0.1.212","0.1.213","0.1.214","0.1.215","0.1.216","0.1.217","0.1.218","0.1.219","0.1.220","0.1.221","0.1.222","0.1.223","0.1.224","0.1.225","0.1.226","0.1.227","0.1.228","0.1.229","0.1.2291","0.1.230","0.1.231","0.1.232","0.1.233","0.1.234","0.1.235","0.1.236","0.1.237","0.1.238","0.1.3","0.1.31","0.1.32","0.1.330","0.1.331","0.1.34","0.1.341","0.1.343","0.1.345","0.1.347","0.1.348","0.1.349","0.1.351","0.1.352","0.1.353","0.1.354","0.1.356","0.1.360","0.1.361","0.1.362","0.1.363","0.1.364","0.1.365","0.1.366","0.1.367","0.1.368","0.1.369","0.1.370","0.1.371","0.1.372","0.1.373","0.1.375","0.1.376","0.1.379","0.1.380","0.1.381","0.1.383","0.1.384","0.1.385","0.1.386","0.1.387","0.1.388","0.1.389","0.1.392","0.1.393","0.1.394","0.1.398","0.1.399","0.1.400","0.1.401","0.1.402","0.1.403","0.1.404","0.1.405","0.1.410","0.1.411","0.1.412","0.1.415","0.1.419","0.1.420","0.1.421","0.1.422","0.1.424","0.1.425","0.1.426","0.1.429","0.1.433","0.1.434","0.1.435","0.1.436","0.1.437","0.1.438","0.1.439","0.1.440","0.1.441","0.1.442","0.1.443","0.1.444","0.1.445","0.1.446","0.1.447","0.1.448","0.1.449","0.1.450","0.1.451","0.1.452","0.1.456","0.1.457","0.1.459","0.1.460","0.1.461","0.1.464","0.1.465","0.1.475","0.1.477","0.1.479","0.1.480","0.1.481","0.1.482","0.1.486","0.1.487","0.1.488","0.1.490","0.1.491","0.1.492","0.1.493","0.1.494","0.1.495","0.1.497","0.1.500","0.1.501","0.1.504","0.1.507","0.1.508","0.1.509","0.1.510","0.1.511","0.1.512","0.1.516","0.1.517","0.1.518","0.1.520","0.1.525","0.1.530","0.1.531","0.1.533","0.1.535","0.1.536","0.1.537","0.1.538","0.1.544","0.1.546","0.1.547","0.1.548","0.1.549","0.1.550","0.1.551","0.1.552","0.1.553","0.1.554","0.1.555","0.1.556","0.1.557","0.1.558","0.1.559","0.1.560","0.1.561","0.1.562","0.1.563","0.1.567","0.1.568","0.1.569","0.1.570","0.1.574","0.1.578","0.1.580","0.1.582","0.1.583","0.1.585","0.1.586","0.1.587","0.1.590","0.1.591","0.1.593","0.1.595","0.1.596","0.1.597","0.1.598","0.1.600","0.1.601","0.1.604","0.1.605","0.1.607","0.1.609","0.1.610","0.1.615","0.1.618","0.1.619","0.1.620","0.1.621","0.1.623","0.1.624","0.1.625","0.1.626","0.1.629","0.1.630","0.1.631","0.1.632","0.1.634","0.1.635","0.1.636","0.1.638","0.1.639","0.1.641","0.1.642","0.1.643","0.1.644","0.1.645","0.1.646","0.1.647","0.1.648","0.1.649","0.1.650","0.1.651","0.1.652","0.1.674","0.1.680","0.1.681","0.1.683","0.1.685","0.1.686","0.1.687","0.1.689","0.1.690","0.1.692","0.1.693","0.1.696","0.1.697","0.1.698","0.1.700","0.1.700.dev0","0.1.700.dev1","0.1.700.dev2","0.1.700.dev3","0.1.700.dev4","0.1.700.dev5","0.1.702","0.1.704","0.1.706","0.1.714","0.1.714.dev1","0.1.715","0.1.716","0.1.719","0.1.720","0.1.721","0.1.723","0.1.724","0.1.729","0.1.736","0.1.738","0.1.743","0.1.745","0.1.746","0.1.747","0.1.748","0.1.749","0.1.750","0.1.751","0.1.758","0.1.765","0.1.769","0.1.7701","0.1.7713","0.1.772","0.1.774","0.1.780","0.1.781","0.1.784","0.1.786","0.1.788","0.1.789","0.1.793","0.1.794","0.1.805","0.1.806","0.1.807","0.1.813","0.1.814","0.1.815","0.1.816","0.1.817","0.1.818","0.1.819","0.1.820","0.1.821","0.1.824","0.10.0","0.10.1","0.11.1","0.12.10","0.12.11","0.12.12","0.12.4","0.12.4.dev1","0.12.4.dev2","0.12.5","0.12.5.dev1","0.12.7","0.12.7.dev1","0.12.8","0.12.9","0.13.0","0.13.1","0.13.1.dev1","0.13.1.dev2","0.13.1.dev3","0.13.2","0.13.2.dev1","0.13.3.dev1","0.13.3.dev2","0.13.6.dev1","0.13.6.dev2","0.13.6.dev3","0.13.7.dev1","0.14.0","0.14.0.dev1","0.14.1","0.2.5","0.2.6","0.3.0","0.3.1","0.4.0","0.4.4","0.5.2","0.5.3","0.5.4","0.5.6","0.6.0","0.6.1","0.6.2","0.6.6","0.7.1","0.7.1.dev1","0.7.1.dev2","0.7.1.dev3","0.7.10","0.7.3","0.7.4","0.7.5","0.7.9","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.8.5","0.8.6","0.9.0","0.9.1","0.9.2","0.9.2.dev1","1.0.0","1.0.0.dev1","1.0.3","1.0.3.dev1","1.1.0","1.1.1","1.1.2","1.1.3","1.10.0","1.10.1","1.10.10","1.10.11","1.10.2","1.10.3","1.10.4","1.10.6","1.10.8","1.10.9","1.10.dev11","1.11.0","1.11.1","1.12.0","1.12.1","1.12.2","1.12.3","1.12.5","1.12.5.dev1","1.12.6.dev1","1.12.6.dev2","1.12.6.dev3","1.12.6.dev4","1.12.6.dev5","1.13.2","1.14.0","1.14.0.dev1","1.14.1","1.14.10","1.14.2","1.14.3","1.14.4","1.14.5","1.14.5.dev1","1.14.6","1.14.7","1.14.8","1.14.9","1.15.0","1.15.1","1.15.10","1.15.2","1.15.3","1.15.6","1.15.7","1.15.8","1.16.0","1.16.1","1.16.11","1.16.12","1.16.18","1.16.19","1.16.2","1.16.20","1.16.21","1.16.3","1.16.4","1.16.5","1.16.6","1.16.7","1.16.8","1.16.9","1.17.0","1.17.2","1.17.3","1.17.4","1.17.5","1.17.9","1.18.0","1.18.1","1.18.13","1.18.13.dev1","1.18.13.dev4","1.18.13.dev5","1.18.14.dev8","1.18.2","1.18.6","1.18.7","1.18.8","1.19.4","1.2.0","1.20.0","1.20.5","1.20.6","1.20.7","1.20.8","1.20.9","1.21.4.dev1","1.21.6","1.21.7","1.22.3","1.22.5","1.23.0","1.23.1","1.23.15","1.23.16","1.23.2","1.23.3","1.23.5","1.24.3","1.24.5","1.25.0","1.25.1","1.25.2","1.26.0","1.26.1","1.26.13","1.26.3","1.26.8","1.27.1.dev11","1.27.1.dev30","1.27.1.dev31","1.27.1.dev40","1.27.1.dev50","1.27.1.dev60","1.27.1.dev9","1.27.4","1.27.6","1.27.8","1.28.0","1.28.1","1.28.10","1.28.11","1.28.13","1.28.4","1.29.1","1.29.3","1.29.4.dev1","1.29.7.dev3","1.3.1","1.3.3","1.3.3.dev1","1.3.3.dev2","1.3.3.dev3","1.30.0","1.30.1","1.30.1.dev5","1.30.1.dev6","1.30.3","1.30.7","1.31.13.dev1","1.31.13.dev10","1.31.13.dev2","1.31.13.dev3","1.31.14","1.31.14.dev2","1.31.14.dev3","1.31.14.dev4","1.31.14.dev5","1.31.14.dev6","1.31.14.dev8","1.31.14.dev9","1.31.15.dev2","1.31.17","1.31.2","1.31.2.dev10","1.31.3","1.31.6","1.31.8","1.32.1","1.32.4","1.32.5.dev1","1.32.9","1.33.4","1.33.5.dev1","1.33.9","1.34.0","1.34.1","1.34.11","1.34.16","1.34.18","1.34.21","1.34.22","1.34.25","1.34.29","1.34.3","1.34.37","1.34.39","1.34.4","1.34.42","1.34.6","1.34.8","1.35.0","1.35.0.dev1","1.35.1","1.35.12","1.35.17","1.35.18","1.35.2","1.35.20","1.35.21","1.35.22","1.35.23","1.35.26","1.35.28","1.35.3","1.35.31","1.35.32","1.35.35","1.35.36","1.35.38","1.35.5","1.35.7","1.35.8","1.36.0","1.36.1","1.36.2","1.36.4","1.37.0","1.37.12","1.37.14","1.37.16","1.37.19","1.37.2","1.37.20","1.37.3","1.37.7","1.37.9","1.38.0","1.38.1","1.38.10","1.38.11","1.38.12","1.38.3","1.38.4","1.38.5","1.38.7","1.38.8","1.39.2","1.39.3","1.39.4","1.39.5","1.39.5.dev1","1.39.6","1.4.0","1.40.0","1.40.0.dev1","1.40.1","1.40.1.dev1","1.40.10","1.40.11","1.40.12","1.40.13","1.40.14","1.40.15","1.40.16","1.40.17","1.40.19","1.40.2","1.40.20","1.40.21","1.40.22","1.40.24","1.40.25","1.40.26","1.40.27","1.40.28","1.40.29","1.40.3","1.40.31","1.40.4","1.40.5","1.40.6","1.40.7","1.40.8","1.40.9","1.41.0","1.41.1","1.41.11","1.41.12","1.41.13","1.41.14","1.41.15","1.41.15.dev2","1.41.17","1.41.18","1.41.19","1.41.2","1.41.20","1.41.21","1.41.22","1.41.23","1.41.24","1.41.25","1.41.26","1.41.27","1.41.28","1.41.3","1.41.4","1.41.5","1.41.6","1.41.7","1.41.8","1.42.0","1.42.1","1.42.10","1.42.11","1.42.12","1.42.2","1.42.3","1.42.4","1.42.5","1.42.6","1.42.7","1.42.8","1.42.9","1.43.0","1.43.1","1.43.10","1.43.12","1.43.13","1.43.15","1.43.16","1.43.17","1.43.18","1.43.19","1.43.2","1.43.3","1.43.4","1.43.5","1.43.6","1.43.7","1.43.9","1.44.1","1.44.10","1.44.11","1.44.12","1.44.13","1.44.14","1.44.15","1.44.16","1.44.17","1.44.18","1.44.19","1.44.2","1.44.21","1.44.22","1.44.23","1.44.24","1.44.25","1.44.26","1.44.27","1.44.28","1.44.3","1.44.4","1.44.5","1.44.6","1.44.7","1.44.8","1.44.9","1.45.0","1.46.0","1.46.1","1.46.2","1.46.4","1.46.5","1.46.6","1.46.7","1.46.8","1.47.0","1.47.1","1.47.2","1.48.0","1.48.1","1.48.10","1.48.11","1.48.12","1.48.14","1.48.15","1.48.16","1.48.17","1.48.18","1.48.19","1.48.2","1.48.3","1.48.4","1.48.5","1.48.6","1.48.7","1.48.8","1.48.9","1.49.0","1.49.1","1.49.2","1.49.3","1.49.4","1.49.5","1.49.6","1.49.7","1.50.0","1.50.1","1.50.2","1.50.4","1.51.0","1.51.1","1.51.2","1.51.3","1.52.0","1.52.1","1.52.10","1.52.11","1.52.12","1.52.14","1.52.15","1.52.16","1.52.2","1.52.3","1.52.4","1.52.5","1.52.6","1.52.8","1.52.9","1.53.1","1.53.1.dev1","1.53.2","1.53.3","1.53.4","1.53.5","1.53.6","1.53.7","1.53.8","1.53.9","1.54.0","1.54.1","1.55.0","1.55.1","1.55.10","1.55.11","1.55.12","1.55.2","1.55.3","1.55.4","1.55.6","1.55.7","1.55.8","1.55.9","1.56.10","1.56.2","1.56.3","1.56.4","1.56.5","1.56.6","1.56.8","1.56.8.dev4","1.56.8.dev5","1.56.8.dev6","1.56.8.dev7","1.56.9","1.57.0","1.57.1","1.57.10","1.57.11","1.57.2","1.57.3","1.57.4","1.57.5","1.57.7","1.57.7.dev1","1.57.8","1.58.0","1.58.1","1.58.2","1.58.4","1.59.0","1.59.1","1.59.1.dev1","1.59.10","1.59.10.dev1","1.59.12","1.59.2","1.59.3","1.59.5","1.59.6","1.59.7","1.59.8","1.59.9","1.6.0","1.60.0","1.60.2","1.60.4","1.60.5","1.60.6","1.60.7","1.60.8","1.60.9","1.61.0","1.61.0.dev1","1.61.1","1.61.11","1.61.13","1.61.15","1.61.16","1.61.17","1.61.19","1.61.2","1.61.20","1.61.3","1.61.4","1.61.5","1.61.6","1.61.7","1.61.8","1.61.9","1.62.1","1.62.4","1.63.0","1.63.0.dev12","1.63.11","1.63.11.dev1","1.63.12","1.63.14","1.63.2","1.63.3","1.63.4.dev1","1.63.5","1.63.6","1.63.7","1.63.8","1.64.1","1.65.0","1.65.0.post1","1.65.1","1.65.3","1.65.4","1.65.4.post1","1.65.5","1.65.6","1.65.7","1.65.8","1.66.0","1.66.1","1.66.2","1.66.3","1.67.0","1.67.0.post1","1.67.1","1.67.2","1.67.4","1.67.4.dev1","1.67.4.post1","1.67.5","1.67.6","1.68.0","1.68.1","1.68.1.dev1","1.68.2","1.69.0","1.69.1","1.69.2","1.69.3","1.7.1","1.7.11","1.7.12","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.7.8","1.7.9","1.70.0","1.70.2","1.70.4","1.71.0","1.71.1","1.71.2","1.71.3","1.72.0","1.72.1","1.72.2","1.72.2.post1","1.72.3","1.72.4","1.72.5.dev1","1.72.5.dev2","1.72.5.dev3","1.72.6","1.72.6.post1","1.72.6.post2","1.72.7","1.72.7.dev1","1.72.7.dev7","1.72.9","1.73.0","1.73.0.post1","1.73.0rc1","1.73.1","1.73.2","1.73.6","1.73.6.post1","1.73.6rc2","1.73.7","1.73.7.dev1","1.73.7.dev2","1.73.7.dev3","1.73.7.dev4","1.74.0","1.74.0.post1","1.74.0.post2","1.74.1","1.74.12","1.74.14","1.74.15","1.74.15.post1","1.74.15.post2","1.74.2","1.74.3","1.74.3.post1","1.74.3rc1","1.74.3rc2","1.74.3rc3","1.74.4","1.74.4.dev1","1.74.6","1.74.7","1.74.7.post1","1.74.7.post2","1.74.7rc1","1.74.8","1.74.8.dev2","1.74.9","1.74.9.dev1","1.74.9.dev2","1.74.9.post1","1.74.9.post2","1.75.0","1.75.2","1.75.3","1.75.4","1.75.5.post1","1.75.5.post2","1.75.6","1.75.7","1.75.8","1.75.9","1.76.0","1.76.1","1.76.2","1.76.3","1.77.0","1.77.1","1.77.2.post1","1.77.3","1.77.4","1.77.4.dev1","1.77.5","1.77.7","1.78.0","1.78.0rc2","1.78.2","1.78.3","1.78.4","1.78.5","1.78.6","1.78.7","1.79.0","1.79.0.dev1","1.79.0.dev2","1.79.0.dev3","1.79.1","1.79.2","1.79.3","1.79.3.dev8","1.8.1","1.80.0","1.80.10","1.80.11","1.80.12","1.80.13","1.80.15","1.80.16","1.80.17","1.80.5","1.80.6","1.80.7","1.80.8","1.80.9","1.81.0","1.81.1","1.81.10","1.81.11","1.81.12","1.81.13","1.81.14","1.81.15","1.81.16","1.81.3","1.81.4","1.81.5","1.81.6","1.81.7","1.81.8","1.81.9","1.81.9.dev1","1.9.0","1.9.1","1.9.2","1.9.3","1.9.4","1.9.5","1.9.dev0"]}],"products":[{"vendor":"berriai","product":"litellm"},{"vendor":"litellm","product":"litellm"}],"references":[{"url":"https://github.com/BerriAI/litellm/security/advisories/GHSA-72m8-9m7m-h278","tags":["x_refsource_CONFIRM","Mitigation","Patch","Vendor Advisory","advisory","web"]},{"url":"https://github.com/BerriAI/litellm/commit/e50b4486d0f7aa0497185a1ebcdd2c91f1769eba","tags":["x_refsource_MISC","Patch","fix","web"]},{"url":"https://github.com/BerriAI/litellm/releases/tag/v1.82.0-stable","tags":["x_refsource_MISC","Product","Release Notes","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59821","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-72m8-9m7m-h278","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59821.json","tags":["advisory"]},{"url":"https://github.com/BerriAI/litellm","tags":["package"]},{"url":"https://pypi.org/project/litellm","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2026-59821","title":"LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks","description":"LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.0-stable, LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the test endpoint, allowing a privileged user with access to create or update guardrails to submit custom Python code that executed in the LiteLLM proxy environment and could expose secrets available to the process. This issue is fixed in version 1.82.0-stable.","status":"published","published":"2026-07-08T19:14:13.265Z","modified":"2026-07-09T14:38:09.991Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"low","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:19:58.560602Z"}],"euvd":[{"id":"EUVD-2026-42350","description":"LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.0-stable, LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the test endpoint, allowing a privileged user with access to create or update guardrails to submit custom Python code that executed in the LiteLLM proxy environment and could expose secrets available to the process. This issue is fixed in version 1.82.0-stable.","status":"published","published":"2026-07-08T19:14:13Z","modified":"2026-07-09T14:38:09Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"low"}],"updated_at":"2026-11-02T18:20:04.126011Z"}],"ghsa":[{"id":"GHSA-72m8-9m7m-h278","title":"LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks","description":"### Impact\n\nLiteLLM's Custom Code Guardrails production create/update paths did not apply the same sandboxing and validation used by the test endpoint.\n\nA privileged user with access to create or update guardrails could submit custom Python code that executed in the LiteLLM proxy environment. In deployments without a configured master key, callers could be treated as proxy administrators, making this reachable without intended administrative authorization.\n\nThis could allow arbitrary code execution in the LiteLLM proxy container and exposure of secrets available to the process.\n\n### Patches\n\nThe issue is fixed in `1.82.0-stable`.\n\nLiteLLM recommend upgrading to `1.82.0-stable` or later.\n\n### Workarounds\n\nIf upgrading is not immediately possible:\n\n1. Restrict access to `POST /guardrails` and `PUT /guardrails/{guardrail_id}` to trusted administrators only.\n2. Ensure `LITELLM_MASTER_KEY` is configured.\n3. Avoid enabling Custom Code Guardrails for untrusted users.","status":"published","published":"2026-07-22T22:38:55Z","modified":"2026-07-22T22:38:58Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"low"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:40:51.375752Z"}],"nvd":[{"id":"CVE-2026-59821","description":"LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.0-stable, LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the test endpoint, allowing a privileged user with access to create or update guardrails to submit custom Python code that executed in the LiteLLM proxy environment and could expose secrets available to the process. This issue is fixed in version 1.82.0-stable.","status":"published","published":"2026-07-08T20:16:57.547Z","modified":"2026-10-25T17:10:00.197Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:12:28.4135Z"}],"osv":[{"id":"CVE-2026-59821","title":"LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks","description":"LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.0-stable, LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the test endpoint, allowing a privileged user with access to create or update guardrails to submit custom Python code that executed in the LiteLLM proxy environment and could expose secrets available to the process. This issue is fixed in version 1.82.0-stable.","status":"published","published":"2026-07-08T19:14:13.265Z","modified":"2026-10-28T02:31:02.971462293Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"low"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:45:12.496548Z"},{"id":"GHSA-72m8-9m7m-h278","title":"LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks","description":"### Impact\n\nLiteLLM's Custom Code Guardrails production create/update paths did not apply the same sandboxing and validation used by the test endpoint.\n\nA privileged user with access to create or update guardrails could submit custom Python code that executed in the LiteLLM proxy environment. In deployments without a configured master key, callers could be treated as proxy administrators, making this reachable without intended administrative authorization.\n\nThis could allow arbitrary code execution in the LiteLLM proxy container and exposure of secrets available to the process.\n\n### Patches\n\nThe issue is fixed in `1.82.0-stable`.\n\nLiteLLM recommend upgrading to `1.82.0-stable` or later.\n\n### Workarounds\n\nIf upgrading is not immediately possible:\n\n1. Restrict access to `POST /guardrails` and `PUT /guardrails/{guardrail_id}` to trusted administrators only.\n2. Ensure `LITELLM_MASTER_KEY` is configured.\n3. Avoid enabling Custom Code Guardrails for untrusted users.","status":"published","published":"2026-07-22T22:38:55Z","modified":"2026-09-10T03:51:10.829513778Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"low"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:46:40.308826Z"},{"id":"PYSEC-2026-3478","title":"LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks","description":"### Impact\n\nLiteLLM's Custom Code Guardrails production create/update paths did not apply the same sandboxing and validation used by the test endpoint.\n\nA privileged user with access to create or update guardrails could submit custom Python code that executed in the LiteLLM proxy environment. In deployments without a configured master key, callers could be treated as proxy administrators, making this reachable without intended administrative authorization.\n\nThis could allow arbitrary code execution in the LiteLLM proxy container and exposure of secrets available to the process.\n\n### Patches\n\nThe issue is fixed in `1.82.0-stable`.\n\nLiteLLM recommend upgrading to `1.82.0-stable` or later.\n\n### Workarounds\n\nIf upgrading is not immediately possible:\n\n1. Restrict access to `POST /guardrails` and `PUT /guardrails/{guardrail_id}` to trusted administrators only.\n2. Ensure `LITELLM_MASTER_KEY` is configured.\n3. Avoid enabling Custom Code Guardrails for untrusted users.","status":"published","published":"2026-07-23T11:41:48.799224Z","modified":"2026-07-23T15:00:14.016159175Z","cvss":[{"version":"4.0","score":2.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","level":"low"}],"updated_at":"2026-11-02T15:52:56.847083Z"}]}}