| Component | LiteLLM |
| Severity | high (CVSS 7.5) |
| CVSS vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| Published (NVD) | 2024-09-13 |
| Last modified | 2026-06-17 |
| Affected versions | < 1.44.8 from the GitHub-reviewed advisory GHSA-g26j-5385-hhw3 |
| Fixed in | 1.44.8 |
| Weakness | CWE-918 |
| CISA KEV | not listed |
NVD description
A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the api_base parameter when making requests to POST /chat/completions, causing the application to send the request to the domain specified by api_base. This request includes the OpenAI API key. A malicious user can set the api_base to their own domain and intercept the OpenAI API key, leading to unauthorized access and potential misuse of the API key.
What to do
- Upgrade LiteLLM to
1.44.8or later. - Do not expose the component's API or UI to the internet without authentication in front of it.
Sources
- NVD: CVE-2024-6587
- https://github.com/berriai/litellm/commit/ba1912afd1b19e38d3704bb156adf887f91ae1e0
- https://huntr.com/bounties/4001e1a2-7b7a-4776-a3ae-e6692ec3d997