CVE-2026-59821 BerriAI CVE debrief

Who should care

Users of LiteLLM, especially those with privileged access to create or update guardrails, should be aware of this vulnerability. They should ensure they are running version 1.82.0-stable or later to mitigate the risk.

Technical summary

The vulnerability exists in LiteLLM's Custom Code Guardrails feature. In versions prior to 1.82.0-stable, the production create and update paths for guardrails did not implement the same level of sandboxing and validation as the test endpoint. This oversight allowed a privileged user to submit custom Python code that could execute within the LiteLLM proxy environment. The executed code could potentially access secrets available to the process, posing a security risk. The vulnerability is addressed in version 1.82.0-stable, where the necessary sandboxing and validation are applied consistently across all relevant paths.

Defensive priority

Medium priority for users with privileged access to LiteLLM's guardrail creation or update functionality. Immediate action is recommended to prevent potential exploitation.

Recommended defensive actions

• Update LiteLLM to version 1.82.0-stable or later
• Review and restrict privileged access to guardrail creation and update functionality
• Monitor for any suspicious activity related to guardrail modifications
• Perform a thorough review of existing guardrails for potential security risks
• Implement additional logging and monitoring for LiteLLM proxy environment
• Conduct a security audit of LiteLLM configurations and user access controls
• Verify that all LiteLLM instances are up-to-date and compliant with security policies

Evidence notes

The CVE record was published on 2026-07-08T20:16:57.547Z and was last modified on 2026-07-13T13:46:42.603Z. The NVD entry is currently Analyzed. The vulnerability has a CVSS score of 2.1 and is classified as LOW severity.

Official resources