Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-58cv-nn1s-qqdx
Vulnerability ID VCID-58cv-nn1s-qqdx
Aliases CVE-2024-4264
GHSA-7ggm-4rjg-594w
Summary A remote code execution (RCE) vulnerability exists in the berriai/litellm project due to improper control of the generation of code when using the `eval` function unsafely in the `litellm.get_secret()` method. Specifically, when the server utilizes Google KMS, untrusted data is passed to the `eval` function without any sanitization. Attackers can exploit this vulnerability by injecting malicious values into environment variables through the `/config/update` endpoint, which allows for the update of settings in `proxy_server_config.yaml`.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-94 Improper Control of Generation of Code ('Code Injection')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.03284 https://api.first.org/data/v1/epss?cve=CVE-2024-4264
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-7ggm-4rjg-594w
cvssv3.1 7.2 https://github.com/BerriAI/litellm
generic_textual HIGH https://github.com/BerriAI/litellm
cvssv3.1 7.2 https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2104-L2108
generic_textual HIGH https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2104-L2108
cvssv3.1 7.2 https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2118
generic_textual HIGH https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2118
cvssv3.1 7.2 https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2509-L2517
generic_textual HIGH https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2509-L2517
cvssv3.1 7.2 https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2562-L2577
generic_textual HIGH https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2562-L2577
cvssv3.1 7.2 https://github.com/BerriAI/litellm/blob/main/litellm/utils.py#L9867-L9885
generic_textual HIGH https://github.com/BerriAI/litellm/blob/main/litellm/utils.py#L9867-L9885
cvssv3 9.8 https://huntr.com/bounties/a3221b0c-6e25-4295-ab0f-042997e8fc61
cvssv3.1 7.2 https://huntr.com/bounties/a3221b0c-6e25-4295-ab0f-042997e8fc61
generic_textual HIGH https://huntr.com/bounties/a3221b0c-6e25-4295-ab0f-042997e8fc61
ssvc Track* https://huntr.com/bounties/a3221b0c-6e25-4295-ab0f-042997e8fc61
cvssv3.1 7.2 https://nvd.nist.gov/vuln/detail/CVE-2024-4264
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2024-4264
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2024-4264
https://github.com/BerriAI/litellm
https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2104-L2108
https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2118
https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2509-L2517
https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2562-L2577
https://github.com/BerriAI/litellm/blob/main/litellm/utils.py#L9867-L9885
a3221b0c-6e25-4295-ab0f-042997e8fc61 https://huntr.com/bounties/a3221b0c-6e25-4295-ab0f-042997e8fc61
CVE-2024-4264 https://nvd.nist.gov/vuln/detail/CVE-2024-4264
GHSA-7ggm-4rjg-594w https://github.com/advisories/GHSA-7ggm-4rjg-594w
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/BerriAI/litellm
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2104-L2108
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2118
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2509-L2517
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2562-L2577
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://github.com/BerriAI/litellm/blob/main/litellm/utils.py#L9867-L9885
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://huntr.com/bounties/a3221b0c-6e25-4295-ab0f-042997e8fc61
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://huntr.com/bounties/a3221b0c-6e25-4295-ab0f-042997e8fc61
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-08-05T19:26:40Z/ Found at https://huntr.com/bounties/a3221b0c-6e25-4295-ab0f-042997e8fc61
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2024-4264
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.87474
EPSS Score 0.03284
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-10T18:37:56.312607+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2024/4xxx/CVE-2024-4264.json 38.6.0