PT-2024-33255 · Berriai · Litellm
Published
2024-06-06
·
Updated
2024-11-03
·
CVE-2024-4888
CVSS v3.1
8.1
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
BerriAI's litellm version latest
Description
The issue arises from improper input validation on the "/audio/transcriptions" endpoint, allowing an attacker to send a specially crafted request that includes a file path to the server. This results in the deletion of the specified file without proper authorization or validation. The vulnerability is present in the code where
os.remove(file.filename) is used to delete a file, enabling any user to delete critical files on the server, such as SSH keys, SQLite databases, or configuration files.Recommendations
As a temporary workaround, consider disabling the
os.remove(file.filename) function until a patch is available. Restrict access to the "/audio/transcriptions" endpoint to minimize the risk of exploitation. Avoid using the file.filename variable in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
RCE
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Litellm