AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

LiteLLMGHSA-7ggm-4rjg-594w

litellm passes untrusted data to `eval` function without sanitization

LiteLLM

CVE-2024-4264 · Published May 18, 2024 · updated Sep 10, 2026

High7.2
No fix yet
GitHub advisory

A remote code execution (RCE) vulnerability exists in the berriai/litellm project due to improper control of the generation of code when using the eval function unsafely in the litellm.get_secret() method. Specifically, when the server utilizes Google KMS, untrusted data is passed to the eval function without any sanitization. Attackers can exploit this vulnerability by injecting malicious values into environment variables through the /config/update endpoint, which allows for the update of settings in proxy_server_config.yaml.

Affected versions

PackageAffectedFixed in
litellm
PyPI
<= 1.28.11No fix yet
Details and references

More LiteLLM advisories

All LiteLLM