{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"1.40.3.dev2","last_affected":"1.40.12"}],"component":"litellm","cve_ids":["CVE-2024-6825"],"ecosystem":"PyPI","epss":0.0165,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-53gh-p8jc-7rg8","id":"tcs_01M5KEZPWW4QAW0N49V5PW3BZP","modified_at":"2026-09-10T03:49:47.802618913Z","published_at":"2025-03-20T12:32:45Z","references":["https://osv.dev/vulnerability/GHSA-53gh-p8jc-7rg8","https://nvd.nist.gov/vuln/detail/CVE-2024-6825","https://github.com/berriai/litellm/commit/441c7275ed2715f47650a7c2e525055c804073a9","https://github.com/BerriAI/litellm","https://github.com/BerriAI/litellm/blob/056913fd7049923a106130b02d7c29e7f312beec/litellm/utils.py#L2818","https://huntr.com/bounties/1d98bebb-6cf4-46c9-87c3-d3b1972973b5"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-53gh-p8jc-7rg8","url":"https://osv.dev/vulnerability/GHSA-53gh-p8jc-7rg8"}],"summary":"LiteLLM Vulnerable to Remote Code Execution (RCE)"}