PT-2024-37119 · Google · Google Kms

Published 2024-06-27 · Updated 2024-09-20 · CVE-2024-5751

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: BerriAI/litellm version v1.35.8

Description: The issue allows an attacker to achieve remote code execution. It exists in the add deployment function, which decodes and decrypts environment variables from base64 and assigns them to os.environ. An attacker can exploit this by sending a malicious payload to the "/config/update" endpoint, which is then processed and executed by the server when the get secret function is triggered. This requires the server to use Google KMS and a database to store a model.

Recommendations: For version v1.35.8, consider disabling the add deployment function and restrict access to the "/config/update" endpoint until a patch is available. Additionally, review the usage of Google KMS and database storage for models to minimize the risk of exploitation.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-5751

GHSA-GPPG-GQW8-WH9G

Affected Products

Google Kms

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-5751 · Security Note
• https://osv.dev/vulnerability/GHSA-gppg-gqw8-wh9g · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-5751 · Vendor Advisory
• https://github.com/BerriAI/litellm/commit/fcea4c22ad96b24436f196ae709f71932e84b0b8 · Note
• https://github.com/BerriAI/litellm/pull/4228 · Note
• https://github.com/berriai/litellm · Note
• https://t.me/cvenotify/95486 · Telegram Post
• https://huntr.com/bounties/ae623c2f-b64b-4245-9ed4-f13a0a5824ce · Note