LiteLLMGHSA-g26j-5385-hhw3
LiteLLM Server-Side Request Forgery (SSRF) vulnerability
High7.5CVE-2024-6587 · Published Sep 13, 2024 · updated Sep 10, 2026
A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the `api_base` parameter when making requests to `POST /chat/completions`, causing the application to send the request to the domain specified by `api_base`. This request includes the OpenAI API key. A malicious user can set the `api_base` to their own domain and intercept the OpenAI API key, leading to unauthorized access and potential misuse of the API key.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| litellm PyPI | < 1.44.8 | 1.44.8 |
Details and references
- CVSS 3.0
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-918
- Also known as
- CVE-2024-6587, PYSEC-2026-1547
More LiteLLM advisories
All LiteLLM| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jun 272024 | litellm vulnerable to remote code execution based on using eval unsafely Critical9.8Jun 27, 2024 | Critical9.8 | 1.40.16 |
| Jun 272024 | litellm vulnerable to improper access control in team managementMedium5.3Jun 27, 2024 | Medium5.3 | 1.40.15 |
| Jun 62024 | Arbitrary file deletion in litellmHigh6.5Jun 6, 2024 | High6.5 | 1.35.36 |
| Jun 62024 | SQL injection in litellmMedium4.9Jun 6, 2024 | Medium4.9 | No fix yet |
| Jun 62024 | SQL injection in litellmMedium6.4Jun 6, 2024 | Medium6.4 | 1.40.0 |
| May 182024 | litellm passes untrusted data to `eval` function without sanitizationHigh7.2May 18, 2024 | High7.2 | No fix yet |