PT-2025-12165 · Unknown · Berriai/Litellm
Published
2025-03-20
·
Updated
2025-07-15
·
CVE-2024-6825
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
BerriAI/litellm version 1.40.12
Description
The issue exists in the handling of the
post call rules configuration, where a callback function can be added. The provided value is split at the final '.' mark, with the last part considered the function name and the remaining part appended with the '.py' extension and imported. This allows an attacker to set a system method, such as os.system, as a callback, enabling the execution of arbitrary commands when a chat response is processed.Recommendations
For BerriAI/litellm version 1.40.12, as a temporary workaround, consider disabling the
post call rules configuration to prevent the execution of arbitrary commands until a patch is available. Restrict access to the system methods, such as os.system, to minimize the risk of exploitation. Avoid using the post call rules configuration with untrusted input until the issue is resolved.Exploit
Fix
RCE
Code Injection
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Berriai/Litellm