LiteLLM, a proxy server for calling LLM APIs, had insufficient validation of file paths during extraction of uploaded skill ZIP archives in versions before 1.83.7-stable. Authenticated users with access to LiteLLM LLM API routes or keys permitting /v1/skills, anthropic_routes, or llm_api_routes could exploit this by uploading a crafted archive containing path traversal entries. This could result in files being written outside the intended extraction or staging directory, potentially leading to unauthorized file overwrite or code execution. The vulnerability is addressed in version 1.83.7-stable.

An authenticated user with limited privileges to certain API routes could exploit this vulnerability to write files outside the designated directories during skill archive extraction. This could lead to unauthorized file modification or code execution, impacting system integrity and security. The CVSS 4.0 score is 6.1 (medium severity), reflecting network attack vector, low attack complexity, and partial privileges required.

Upgrade LiteLLM to version 1.83.7-stable or later, where this path traversal vulnerability has been fixed. No other mitigation is indicated by the vendor advisory. Patch status is confirmed by the version fix stated in the description.