Advisoriesby IbisLiteLLMGHSA-gw2q-qw9j-rgv7
LiteLLM Vulnerable to Denial of Service (DoS)
Fix: upgrade to 1.53.1.dev1 or later
A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service (DoS) by exploiting the use of ast.literal_eval to parse user input. This function is not safe and is prone to DoS attacks, which can crash the litellm Python server.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| litellm PyPI | < 1.53.1.dev1 | 1.53.1.dev1 |
Details and references
- CVSS 3.0
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-400
- Also known as
- CVE-2024-10188, PYSEC-2026-1549
More LiteLLM advisories
All LiteLLM
LiteLLM Has a Leakage of Langfuse API KeysCVE-2025-0330no fix yetLiteLLM Has an Improper Authorization VulnerabilityCVE-2025-0628fixed in 1.61.15LiteLLM Reveals Portion of API Key via a Logging FileCVE-2024-9606fixed in 1.44.12LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP RequestCVE-2024-8984fixed in 1.56.2LiteLLM Vulnerable to Remote Code Execution (RCE)CVE-2024-6825no fix yetLiteLLM Server-Side Request Forgery (SSRF) vulnerabilityCVE-2024-6587fixed in 1.44.8