VDB
KO
LOW

GHSA-72m8-9m7m-h278

LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

Quick fix

GHSA-72m8-9m7m-h278 — litellm: upgrade to the fixed version with the command below. 

pip install --upgrade 'litellm>=1.82.0'

Details

### Impact

LiteLLM's Custom Code Guardrails production create/update paths did not apply the same sandboxing and validation used by the test endpoint.

A privileged user with access to create or update guardrails could submit custom Python code that executed in the LiteLLM proxy environment. In deployments without a configured master key, callers could be treated as proxy administrators, making this reachable without intended administrative authorization.

This could allow arbitrary code execution in the LiteLLM proxy container and exposure of secrets available to the process.

### Patches

The issue is fixed in `1.82.0-stable`.

LiteLLM recommend upgrading to `1.82.0-stable` or later.

### Workarounds

If upgrading is not immediately possible:

1. Restrict access to `POST /guardrails` and `PUT /guardrails/{guardrail_id}` to trusted administrators only. 2. Ensure `LITELLM_MASTER_KEY` is configured. 3. Avoid enabling Custom Code Guardrails for untrusted users.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / litellm
Introduced in: 0 Fixed in: 1.82.0
Fix pip install --upgrade 'litellm>=1.82.0'

References