AI agent vulnerability · LiteLLM

CVE-2024-4888: Arbitrary file deletion in litellm

highCVSS 4.0 7.0 · 3.0 6.5GHSA-3xr8-qfvj-9p9j

BerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on the /audio/transcriptions endpoint. An attacker can exploit this vulnerability by sending a specially crafted request that includes a file path to the server, which then deletes the specified file without proper authorization or validation.

Published Jun 6, 2024 · Updated Nov 4, 2024

Affected packages

litellm

Ecosystem: PyPI
Affected: < 1.35.36
Fixed in: 1.35.36
Check: pip show litellm

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

BerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on the /audio/transcriptions endpoint. An attacker can exploit this vulnerability by sending a specially crafted request that includes a file path to the server, which then deletes the specified file without proper authorization or validation. This vulnerability is present in the code where os.remove(file.filename) is used to delete a file, allowing any user to delete critical files on the server such as SSH keys, SQLite databases, or configuration files.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More LiteLLM vulnerabilities

All LiteLLM entries