CVE-2024-4888 Arbitrary File Deletion in BerriAI/litellm
Attackers can delete arbitrary server files via path traversal in the audio transcription endpoint, potentially compromising system integrity.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-4888?
CVE-2024-4888 is a medium-severity path traversal vulnerability in berriai/litellm, published on 6 Jun 2024. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
BerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on the `/audio/transcriptions` endpoint. An attacker can exploit this vulnerability by sending a specially crafted request that includes a file path to the server, which then deletes the specified file without proper authorization or validation. This vulnerability is present in the code where `os.remove(file.filename)` is used to delete a file, allowing any user to delete critical files on the server such as SSH keys, SQLite databases, or configuration files.
Weakness: CWE-862
Which versions are affected by CVE-2024-4888?
3 open source packages ship an affected version, including litellm. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
litellm PyPI | All versions | 1.35.36 |
litellm PyPI | All versions | 1.35.36 |
litellm PyPI | All versions | 1.35.36 |
Products include Litellm Litellm.
How do I fix CVE-2024-4888?
Upgrade litellm to 1.35.36 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2024-4888 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-4888 exists.
Other vulnerabilities in berriai/litellm
Sources
Also known as GHSA-3xr8-qfvj-9p9j, PYSEC-2026-1540.