LiteLLMGHSA-3xr8-qfvj-9p9j
Arbitrary file deletion in litellm
High6.5CVE-2024-4888 · Published Jun 6, 2024 · updated Sep 10, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| litellm PyPI | < 1.35.36 | 1.35.36 |
Details and references
BerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on the `/audio/transcriptions` endpoint. An attacker can exploit this vulnerability by sending a specially crafted request that includes a file path to the server, which then deletes the specified file without proper authorization or validation. This vulnerability is present in the code where `os.remove(file.filename)` is used to delete a file, allowing any user to delete critical files on the server such as SSH keys, SQLite databases, or configuration files.
More LiteLLM advisories
All LiteLLM| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jun 62024 | SQL injection in litellm CVE-2024-4890Medium4.9no fix yet | Medium4.9 | No fix yet |
| Jun 62024 | SQL injection in litellm CVE-2024-5225Medium6.4fixed in 1.40.0 | Medium6.4 | 1.40.0 |
| May 182024 | litellm passes untrusted data to `eval` function without sanitization CVE-2024-4264High7.2no fix yet | High7.2 | No fix yet |
| Jun 272024 | litellm vulnerable to remote code execution based on using eval unsafely CVE-2024-5751Critical9.8fixed in 1.40.16 | Critical9.8 | 1.40.16 |
| Jun 272024 | litellm vulnerable to improper access control in team management CVE-2024-5710Medium5.3fixed in 1.40.15 | Medium5.3 | 1.40.15 |
| Apr 102024 | LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint CVE-2024-2952Critical9.8fixed in 1.34.42 | Critical9.8 | 1.34.42 |