CVE-2024-5751 Remote Code Execution in BerriAI/litellm

What is CVE-2024-5751?

CVE-2024-5751 is a critical code injection vulnerability in berriai/litellm, published on 27 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the `add_deployment` function, which decodes and decrypts environment variables from base64 and assigns them to `os.environ`. An attacker can exploit this by sending a malicious payload to the `/config/update` endpoint, which is then processed and executed by the server when the `get_secret` function is triggered. This requires the server to use Google KMS and a database to store a model.

Weakness: CWE-94

Which versions are affected by CVE-2024-5751?

3 open source packages ship an affected version, including litellm. It affects 1 product.

Products include Litellm Litellm.

How do I fix CVE-2024-5751?

Upgrade litellm to 1.40.16 or later.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2024-5751 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-5751 exists.

Other vulnerabilities in berriai/litellm

• CVE-2026-42208 BerriAI LiteLLM SQL Injection Exploited Critical 9.3
• CVE-2026-59822 BerriAI LiteLLM Improper Authentication Exploited High 8.8
• CVE-2026-42271 BerriAI LiteLLM Command Injection Exploited High 8.7
• CVE-2024-2952 Server-Side Template Injection in BerriAI/litellm Critical 9.8
• CVE-2026-49468 LiteLLM: Authentication Bypass via Host Header Injection Critical 9.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-gppg-gqw8-wh9g, PYSEC-2026-389.