Security brief

Historical advisory: LiteLLM callback configuration could execute commands

REVIEW

CVE-2024-6825 concerns a code-capable callback configuration path, not a product named “Remote Code Execution”.

Published 29 Oct 2026 · Material update 20 Mar 2025 — last time the underlying evidence changed · Evidence: high

What happened

OSV describes a LiteLLM issue involving the post_call_rules configuration. A supplied callback reference could be resolved and imported in a way that allowed command execution when a chat response was processed. The record includes version 1.40.12.

The affected-range record starts at 1.40.3.dev2 and identifies 1.40.12 as the last affected version. It does not provide a fixed-version event in the record reviewed here, so this brief does not invent one.

For legacy deployments, check the upstream advisory and patch reference before selecting an update. Restrict who can change executable configuration. A settings field that names a callback is part of a code-execution boundary and should not be treated as ordinary user content.

Read the original source.

Who should check?

Operators of legacy LiteLLM deployments exposing callback configuration.

Next step

Consult the upstream patch and current release guidance before updating.

What we know

Last affected version in record
1.40.12

What remains unknown

Open question
The reviewed range record does not supply a fixed-version event.

Source references

Technical details

CVE
CVE-2024-6825