litellm Remote Code Execution Vulnerability
Evidence indicates that litellm is affected by a security issue. Reported affected versions include 1.40.12.
What Happened
Evidence indicates that litellm is affected by a security issue. Reported affected versions include 1.40.12.
Why This Matters
Publisher reporting describes a security event affecting RCE. BugSkan could not yet bind a CVE or affected version, so treat the source details as the current record.
Recommended Action
Confirm whether RCE is present in your environment and review vendor guidance for this report. Apply available patches or mitigations if your deployment matches the described conditions.
Exposure
Exposure unknown
Mar 20, 2025 18:02
Exposure reason: This incident does not currently match a technology in My Interests.
Exploitation status: UNKNOWN
Affected versions: 1.40.12
Primary entities:
Timeline
-
Incident first seen
Mar 20, 2025 18:02BugSkan first recorded this incident.
-
LiteLLM Vulnerable to Remote Code Execution (RCE)
Mar 20, 2025 18:02OSV.dev · Vulnerability
Sources
OSV.dev · Mar 20, 2025 18:02
BerriAI/litellm version 1.40.12 contains a vulnerability that allows remote code execution. The issue exists in the handling of the 'post_call_rules' configuration, where a callback function can be added. The provided value is split at the final '.' mark, with the last part considered the function name and the remaining part appended with the '.py' extension and imported. This allows an attacker to set a system method, such as 'os.system', as a callback, enabling the execution of arbitrary commands when a chat response is processed.
Open publisher sourceRelated Incidents
Other BugSkan incidents that share identifiers, products, or vendors with this report.
My Interests Match
Create an account to see which incidents overlap with your interests.