CVE-2024-5751
Critical
Description
BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the `add_deployment` function, which decodes and decrypts environment variables from base64 and assigns them to `os.environ`. An attacker can exploit this by sending a malicious payload to the `/config/update` endpoint, which is then processed and executed by the server when the `get_secret` function is triggered. This requires the server to use Google KMS and a database to store a model.
SeverityCritical
CVSS9.8
Exploit probability—
ProductLitellm
PublishedJun 27, 2024
First seenJun 27, 2024
Weakness typeCWE-94Code injection
How to fix
Update
- litellm1.40.16 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| litellm litellm | 1.35.8 | — |
| litellmPyPI | v < 1.40.16 | 1.40.16 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.