CVE Feed

    Dashboard / CVE / CVE-2024-4264

    CVE-2024-4264

    A remote code execution (RCE) vulnerability exists in the berriai/litellm project due to improper control of the generation of code when using the `eval` function unsafely in the `litellm.get_secret()` method. Specifically, when the server utilizes Google KMS, untrusted data is passed to the `eval` function without any sanitization. Attackers can exploit this vulnerability by injecting malicious values into environment variables through the `/config/update` endpoint, which allows for the update of settings in `proxy_server_config.yaml`.

    Published:May 18, 2024
    Last Modified:Apr 15, 2026
    EPS:May 18, 2024
    EPSS Score:0.03284
    CVSS Score:9.8

    Affected Products

    Vendor
    Berriai
    Product
    Litellm

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-84377 (CVSS 6.5) — LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to versions 1.88.6…
    CVE-2026-37004 (CVSS 9.8) — BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated …
    CVE-2026-30623 (CVSS 9.8) — LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The a…
    CVE-2026-59819 (CVSS 2.1) — LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.10-stable,…
    CVE-2026-59822 (CVSS 8.8) — LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM…
    CVE-2026-59820 (CVSS 6.1) — LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.7-stable, …
    CVE-2026-59821 (CVSS 2.1) — LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.0-stable, …
    CVE-2026-49468 (CVSS 9.5) — LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, a Host-…
    CVE-2026-12799 (CVSS 2.1) — A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this issue is the func…
    CVE-2026-12797 (CVSS 2.1) — A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function async_pre_call_h…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High