PT-2026-53474 · Pypi · Litellm

Publicado 2026-06-29 · Atualizado 2026-06-29

OSV

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the add deployment function, which decodes and decrypts environment variables from base64 and assigns them to os.environ. An attacker can exploit this by sending a malicious payload to the /config/update endpoint, which is then processed and executed by the server when the get secret function is triggered. This requires the server to use Google KMS and a database to store a model.

Correção

Identificadores relacionados

PYSEC-2026-389

Produtos afetados

Litellm

Referências · 8

• https://github.com/BerriAI/litellm/pull/4228 · Nota
• https://github.com/berriai/litellm · Nota
• https://github.com/BerriAI/litellm/commit/fcea4c22ad96b24436f196ae709f71932e84b0b8 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2024-5751 · Nota de Segurança
• https://osv.dev/vulnerability/PYSEC-2026-389 · Aviso do Fabricante
• https://pypi.org/project/litellm · Nota
• https://github.com/advisories/GHSA-gppg-gqw8-wh9g · Nota
• https://huntr.com/bounties/ae623c2f-b64b-4245-9ed4-f13a0a5824ce · Nota