CVE-2024-4888: Arbitrary File Deletion in BerriAI/litellm
BerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on the /audio/transcriptions endpoint. An attacker can exploit this vulnerability by sending a specially crafted request that includes a file path to the server, which then deletes the specified file without proper authorization or validation. This vulnerability is present in the code where os.remove(file.filename) is used to delete a file, allowing any user to delete critical files on the server such as SSH keys, SQLite databases, or configuration files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pip/litellmto a version that resolves this vulnerability.Fixed in 1.35.36
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4888?
CVE-2024-4888 is classified as a high severity vulnerability due to the potential for arbitrary file deletion.
How do I fix CVE-2024-4888?
To fix CVE-2024-4888, upgrade to litellm version 1.35.36 or later.
What software is affected by CVE-2024-4888?
CVE-2024-4888 affects litellm versions up to 1.35.36 and all versions prior to 1.35.19.
What is the impact of CVE-2024-4888?
The impact of CVE-2024-4888 allows attackers to exploit the vulnerability to delete arbitrary files on the server.
Which endpoint is vulnerable in CVE-2024-4888?
The vulnerable endpoint in CVE-2024-4888 is the /audio/transcriptions endpoint.