CVE-2026-59821
High · 7.2CVSS
7.2
EPSS
0.9%
Published
Jul 8, 2026
CISA due date
—
The record
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.0-stable, LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the test endpoint, allowing a privileged user with access to create or update guardrails to submit custom Python code that executed in the LiteLLM proxy environment and could expose secrets available to the process. This issue is fixed in version 1.82.0-stable.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-63378 TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query… CWE-94
- CVE-2026-63346 Refitter is a tool for generating a C# REST API client using the Refit library. CWE-94
- CVE-2026-63345 Refitter is a tool for generating a C# REST API client using the Refit library. CWE-94
- CVE-2026-63344 Refitter is a tool for generating a C# REST API client using the Refit library. CWE-94
- CVE-2026-62853 ThingLinks is an enterprise IoT platform. CWE-94
- CVE-2026-62284 OSAC operator is a Kubernetes operator. CWE-94
- CVE-2026-116852 Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions. CWE-94
- CVE-2026-118635 The The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory… CWE-94