CVE-2026-59821

UNKNOWN 0.0

LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

CVSS Score

0.0

EPSS Score

0.3%

EPSS Percentile

21th

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.0-stable, LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the test endpoint, allowing a privileged user with access to create or update guardrails to submit custom Python code that executed in the LiteLLM proxy environment and could expose secrets available to the process. This issue is fixed in version 1.82.0-stable.

CWE	CWE-94
Vendor	berriai
Product	litellm
Published	Jul 8, 2026
Last Updated	Jul 9, 2026

Stay Ahead of the Next One

Get instant alerts for berriai litellm

Be the first to know when new unknown vulnerabilities affecting berriai litellm are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

BerriAI / litellm

< 1.82.0-stable

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/BerriAI/litellm/security/advisories/GHSA-72m8-9m7m-h278 github.com: https://github.com/BerriAI/litellm/commit/e50b4486d0f7aa0497185a1ebcdd2c91f1769eba github.com: https://github.com/BerriAI/litellm/releases/tag/v1.82.0-stable