{
 "id": "AIR-2026-0833",
 "slug": "cve-2026-59820-litellm-arbitrary-file-write-via-skills-archi",
 "title": "CVE-2026-59820: LiteLLM Arbitrary File Write via Skills Archive",
 "summary": "LiteLLM skills archive extraction failed to properly validate file paths from uploaded ZIP archives, leading to path traversal. Authenticated users could exploit this to write arbitrary files and potentially achieve code execution.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "LiteLLM"
 ],
 "incident_date": "2026-07-22",
 "incident_date_precision": "day",
 "first_reported": "2026-07-08",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59820",
   "publisher": "NVD",
   "title": "CVE-2026-59820: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.",
   "published_at": "2026-07-08"
  },
  {
   "url": "https://github.com/advisories/GHSA-5jmr-gcrj-2c9q",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-59820: LiteLLM: Arbitrary file write via path traversal in Skills archive extraction",
   "published_at": "2026-07-22"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-59820",
  "litellm",
  "path-traversal"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}