CVE-2026-59821
영향 패키지: pip/litellm
Qualys 위협 인텔 · 심각도 4/5 · QID 531797 · Web Application
공개 익스플로잇
측면이동
쉬운 악용
대량 데이터 유출
서비스 거부
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.0-stable, LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the test endpoint, allowing a privileged user with access to create or update guardrails to submit custom Python code that executed in the LiteLLM proxy environment and could expose secrets available to the process. This issue is fixed in version 1.82.0-stable.
타임라인
벡터: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H