{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"1.40.3.dev2","last_affected":"1.40.12"}],"component":"litellm","cve_ids":["CVE-2024-6825"],"ecosystem":"PyPI","epss":0.0165,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-53gh-p8jc-7rg8","id":"tcs_01M5KGT770VP93GPWKCBD98M4K","modified_at":"2026-07-07T17:46:52.152742975Z","published_at":"2026-07-07T14:34:54.867610Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1541","https://nvd.nist.gov/vuln/detail/CVE-2024-6825","https://github.com/berriai/litellm/commit/441c7275ed2715f47650a7c2e525055c804073a9","https://github.com/BerriAI/litellm","https://github.com/BerriAI/litellm/blob/056913fd7049923a106130b02d7c29e7f312beec/litellm/utils.py#L2818","https://huntr.com/bounties/1d98bebb-6cf4-46c9-87c3-d3b1972973b5","https://pypi.org/project/litellm","https://github.com/advisories/GHSA-53gh-p8jc-7rg8"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-1541","url":"https://osv.dev/vulnerability/PYSEC-2026-1541"}],"summary":"LiteLLM Vulnerable to Remote Code Execution (RCE)"}