GitHub Advisoryadvisory · PyPI

GHSA-7ggm-4rjg-594w litellm passes untrusted data to `eval` function without sanitization

HIGH Published 2024-05-18 Modified 2024-05-20 Official page ↗
Aliases
CVE-2024-4264
Ecosystem
PyPI
Packages
litellm
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-94
Reviewed
2024-05-20

Affected packages

• PyPI litellm: <= 1.28.11 (no fix yet)

Description

A remote code execution (RCE) vulnerability exists in the berriai/litellm project due to improper control of the generation of code when using the `eval` function unsafely in the `litellm.get_secret()` method. Specifically, when the server utilizes Google KMS, untrusted data is passed to the `eval` function without any sanitization. Attackers can exploit this vulnerability by injecting malicious values into environment variables through the `/config/update` endpoint, which allows for the update of settings in `proxy_server_config.yaml`.

Related

Alias · CVE (1)

  • CVE-2024-4264 A remote code execution (RCE) vulnerability exists in the berriai/litellm project due to improper control of the generation of code when… vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References