litellm@0.1.213 vulnerabilities

litellm is a Library to easily interface with LLM API providers

Affected versions of this package are vulnerable to Denial of Service (DoS) through the use of ast.literal_eval to parse user input.

Upgrade litellm to version 1.53.1 or higher.

litellm is a Library to easily interface with LLM API providers

Affected versions of this package are vulnerable to Improper Output Neutralization for Logs due to the incomplete masking of API keys in the logging functionality. An attacker can expose sensitive information by accessing the application logs.

Upgrade litellm to version 1.44.12 or higher.

litellm is a Library to easily interface with LLM API providers

Affected versions of this package are vulnerable to Improper Authorization due to the overly privileged API key assigned to internal_user_viewer roles. An attacker can escalate privileges within the application by accessing administrative functions such as /users/list and /users/get_users.

Upgrade litellm to version 1.61.15 or higher.

litellm is a Library to easily interface with LLM API providers

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the processing of multipart boundaries in HTTP requests. An attacker can cause excessive resource consumption and render the service unavailable by appending characters to the end of a multipart boundary.

Upgrade litellm to version 1.56.2 or higher.

litellm is a Library to easily interface with LLM API providers

Affected versions of this package are vulnerable to Arbitrary Command Injection through the post_call_rules configuration. An attacker can execute arbitrary commands by setting a system method, such as os.system, as a callback, which is executed when a chat response is processed.

Upgrade litellm to version 1.65.5 or higher.

litellm is a Library to easily interface with LLM API providers

Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata due to an issue in proxy_server.py. An attacker can obtain sensitive information, including API keys, by triggering error conditions during the parsing of team settings.

Upgrade litellm to version 1.65.5 or higher.

litellm is a Library to easily interface with LLM API providers

Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource in the generate_key_fn() function, which allows a user with the Internal role to change the keys of another user whose user_id they know. An attacker can escalate privileges via the /key/update.

Upgrade litellm to version 1.60.4 or higher.

litellm is a Library to easily interface with LLM API providers

Affected versions of this package are vulnerable to Server-Side Request Forgery (SSRF) via the api_base parameter used in POST requests at the /chat/completions endpoint. This value can be set to a malicious domain, allowing the owner of that domain to retrieve the OpenAI API keys.

Upgrade litellm to version 1.44.8 or higher.

litellm is a Library to easily interface with LLM API providers

Affected versions of this package are vulnerable to Code Injection via the add_deployment() function, which can decrypt base64 encoded values and assign them to os.eviron variables. An attacker can set some vulnerable values via the /config/update endpoint, which will be set in the environment when the model is invoked. If Google KMS is in use, the model invocation will also trigger a call to get_secret() to retrieve the malicious values which have been decrypted, and pass their values to the eval() function.

Upgrade litellm to version 1.40.16 or higher.

litellm is a Library to easily interface with LLM API providers

Affected versions of this package are vulnerable to Code Injection due to the use of unvalidated input in the eval function within the secret management system. An attacker can execute arbitrary code by setting the UI_LOGO_PATH variable to a remote server address in the get_image function, leading to the writing of a malicious Google KMS configuration file to the cached_logo.jpg file. This file can then be used to execute arbitrary code by assigning malicious code to the SAVE_CONFIG_TO_DB environment variable, leading to full system control.

Upgrade litellm to version 1.34.39 or higher.

litellm is a Library to easily interface with LLM API providers

Affected versions of this package are vulnerable to SQL Injection through the /global/spend/logs endpoint. An authenticated attacker can manipulate data and potentially gain unauthorized access by injecting malicious SQL commands into the api_key parameter.

Upgrade litellm to version 1.40.0 or higher.

litellm is a Library to easily interface with LLM API providers

Affected versions of this package are vulnerable to SQL Injection through the /team/update process. An attacker can extract or manipulate sensitive data by injecting malicious SQL commands into the user_id parameter.

Upgrade litellm to version 1.49.6 or higher.

litellm is a Library to easily interface with LLM API providers

Affected versions of this package are vulnerable to Improper Control of Generation of Code ('Code Injection') via the eval function in the litellm.get_secret() method. An attacker can execute arbitrary code by injecting malicious values into environment variables through the /config/update endpoint, which allows for the update of settings in proxy_server_config.yaml.

Upgrade litellm to version 1.40.16 or higher.

litellm is a Library to easily interface with LLM API providers

Affected versions of this package are vulnerable to Improper Access Control due to the Proxy using a hardcoded demo account with no permissions, posing a potential security risk.

Upgrade litellm to version 1.35.1 or higher.

litellm is a Library to easily interface with LLM API providers

Affected versions of this package are vulnerable to Improper Access Control where users could inadvertently delete files from the proxy server when accessing the /audio/transcriptions endpoint.

Upgrade litellm to version 1.35.18 or higher.