{"id":"CVE-2024-5751","published":"2024-06-27T18:40:49Z","modified":"2025-10-15T12:50:28Z","title":"Remote Code Execution in BerriAI/litellm","vendor":"berriai","product":"berriai/litellm","tier":"tail","description":{"text":"BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the `add_deployment` function, which decodes and decrypts environment variables from base64 and assigns them to `os.environ`. An attacker can exploit this by sending a malicious payload to the `/config/update` endpoint, which is then processed and executed by the server when the `get_secret` function is triggered. This requires the server to use Google KMS and a database to store a model.","provenance":"source","from":"CVE.org"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00882,"percentile":0.59134,"provenance":"source"},"cwes":[{"id":"CWE-94","name":"Improper Control of Generation of Code"}],"references":[{"url":"https://huntr.com/bounties/ae623c2f-b64b-4245-9ed4-f13a0a5824ce","tags":[]}],"priority":{"score":18.7,"factors":[{"name":"EPSS percentile","points":11.83},{"name":"CVSS severity","points":6.86}]},"vendorSlug":"berriai","affectedVersions":[{"vendor":"berriai","product":"berriai/litellm","versions":[">= unspecified, <= latest"]}],"affected":[{"ecosystem":"PyPI","package":"litellm","vulnerableRanges":["<1.40.16"],"patched":["1.40.16"],"from":["GHSA-gppg-gqw8-wh9g","PYSEC-2026-389"],"provenance":"source"}],"euvd":{"id":"EUVD-2024-2057","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-berriai-litellm-cve-2024-5751","children":[{"from":"CVE-2024-5751","to":"CVE-2024-9606","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["litellm/utils.py"],"commits":["https://github.com/BerriAI/litellm/commit/fcea4c22ad96b24436f196ae709f71932e84b0b8","https://github.com/berriai/litellm/commit/9094071c4782183e84f10630e2450be3db55509a"],"basis":"rarely changed file"}]}],"packageHistory":[{"cve":"CVE-2024-4888","published":"2024-06-06","fixed":"1.35.36","kev":false},{"cve":"CVE-2024-5225","published":"2024-06-06","fixed":"1.40.0","kev":false},{"cve":"CVE-2024-5710","published":"2024-06-27","fixed":"1.40.15","kev":false,"link":{"from":"CVE-2024-5710","to":"CVE-2024-5751","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:litellm","fromFixed":"1.40.15","toFixed":"1.40.16","daysApart":0}]}},{"cve":"CVE-2024-5751","published":"2024-06-27","fixed":"1.40.16","kev":false},{"cve":"CVE-2024-6587","published":"2024-09-13","fixed":"1.44.8","kev":false,"link":{"from":"CVE-2024-5751","to":"CVE-2024-6587","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"PyPI:litellm","fromFixed":"1.40.16","toFixed":"1.44.8","daysApart":78}]}},{"cve":"CVE-2024-9606","published":"2025-03-20","fixed":"1.44.12","kev":false},{"cve":"CVE-2024-10188","published":"2025-03-20","fixed":"1.53.1.dev1","kev":false}],"package":"PyPI:litellm"}}