Last seen March 20, 2025

litellm Remote Code Execution Vulnerability

Evidence indicates that litellm is affected by a security issue. Reported affected versions include 1.40.12.

Technical Severity
Medium severity
Lifecycle Status

STABLE

What Happened

Evidence indicates that litellm is affected by a security issue. Reported affected versions include 1.40.12.

Why This Matters

Publisher reporting describes a concrete security event. BugSkan could not yet bind it to a CVE or affected version, so treat the source details as the current record.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Identify deployments of litellm matching the evidenced affected versions: 1.40.12.

Exposure

My Interests Exposure

Exposure unknown

Recommended Response
Last Seen

Mar 20, 2025 18:02

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: UNKNOWN

Affected versions: 1.40.12

Primary entities:

BerriAIlitellmRemote Code ExecutionvulnerabilityBerriAI/litellm

Timeline

  • Incident first seen
    Mar 20, 2025 18:02

    BugSkan first recorded this incident.

  • LiteLLM Vulnerable to Remote Code Execution (RCE)
    Mar 20, 2025 18:02

    OSV.dev · Vulnerability

Sources

LiteLLM Vulnerable to Remote Code Execution (RCE)

OSV.dev · Mar 20, 2025 18:02

BerriAI/litellm version 1.40.12 contains a vulnerability that allows remote code execution. The issue exists in the handling of the 'post_call_rules' configuration, where a callback function can be added. The provided value is split at the final '.' mark, with the last part considered the function name and the remaining part appended with the '.py' extension and imported. This allows an attacker to set a system method, such as 'os.system', as a callback, enabling the execution of arbitrary commands when a chat response is processed.

Open publisher source

My Interests Match

Want personalized relevance?

Create an account to see which incidents overlap with your interests.

← Back to incident intelligence