AI agent vulnerability · LiteLLM

CVE-2024-6587: LiteLLM Server-Side Request Forgery (SSRF) vulnerability

highCVSS 4.0 8.7 · 3.0 7.5GHSA-g26j-5385-hhw3

A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the apibase parameter when making requests to POST /chat/completions, causing the application to send the request to the domain specified by apibase. This request includes the OpenAI API key.

Published Sep 13, 2024

Affected packages

litellm

Ecosystem: PyPI
Affected: < 1.44.8
Fixed in: 1.44.8
Check: pip show litellm

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the api_base parameter when making requests to POST /chat/completions, causing the application to send the request to the domain specified by api_base. This request includes the OpenAI API key. A malicious user can set the api_base to their own domain and intercept the OpenAI API key, leading to unauthorized access and potential misuse of the API key.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More LiteLLM vulnerabilities

All LiteLLM entries