MEDIUM

GHSA-5jmr-gcrj-2c9q

LiteLLM: Arbitrary file write via path traversal in Skills archive extraction

빠른 조치

GHSA-5jmr-gcrj-2c9q — litellm: 아래 명령으로 수정 버전으로 올리세요.

pip install --upgrade 'litellm>=1.83.7'

상세

### Impact

LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives. An authenticated user with access to LiteLLM LLM API routes, or a key whose `allowed_routes` includes `/v1/skills`, `anthropic_routes`, or `llm_api_routes`, could upload a crafted skill archive containing path traversal entries.

When the skill was processed for execution, those entries could be written outside the intended extraction/staging directory. This could allow arbitrary file write and may lead to code execution depending on deployment configuration and writable paths.

### Patches

The issue is fixed in `1.83.7-stable`.

LiteLLM recommens upgrading to `1.83.7-stable` or later.

### Workarounds

If upgrading is not immediately possible:

1. Block `POST /v1/skills` at your reverse proxy or API gateway. 2. Restrict Skills API access to trusted users only.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

PyPI / litellm

최초 영향 버전: 0 수정 버전: 1.83.7

수정 pip install --upgrade 'litellm>=1.83.7'

상세

이 버전이 영향받나요?

영향 패키지

참고