CVE-2024-4888
Description
BerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on the `/audio/transcriptions` endpoint. An attacker can exploit this vulnerability by sending a specially crafted request that includes a file path to the server, which then deletes the specified file without proper authorization or validation. This vulnerability is present in the code where `os.remove(file.filename)` is used to delete a file, allowing any user to delete critical files on the server such as SSH keys, SQLite databases, or configuration files.
How to fix
- litellm litellm1.35.19 or later
- litellm1.35.36 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| litellm litellm | v < 1.35.19 | 1.35.19 |
| litellmPyPI | v < 1.35.36 | 1.35.36 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.