Arbitrary file deletion in litellm
BerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on the `/audio/transcriptions` endpoint. An attacker can exploit this vulnerability by sending a specially crafted request that includes a file path to the server, which then deletes the specified file without proper authorization or validation. This vulnerability is present in the code where `os.remove(file.filename)` is used to delete a file, allowing any user to delete critical files on the server such as SSH keys, SQLite databases, or configuration files.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-4888US | high8.1OT elevated | — | ||
BerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on the `/audio/transcriptions` endpoint. An attacker can exploit… | ||||
references
External citations — patches, advisories, analysis.
- https://github.com/BerriAI/litellmPACKAGE
- https://github.com/BerriAI/litellm/pull/3193WEB
- https://github.com/advisories/GHSA-3xr8-qfvj-9p9jADVISORY
- https://huntr.com/bounties/48461d89-cf13-4ad3-a43e-0d37da08fc6cWEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-4888ADVISORY
- https://pypi.org/project/litellmPACKAGE
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan