A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the `api_base` parameter when making requests to `POST /chat/completions`, causing the application to send the request to the domain specified by `api_base`. This request includes the OpenAI API key. A malicious user can set the `api_base` to their own domain and intercept the OpenAI API key, leading to unauthorized access and potential misuse of the API key.

According to its self-reported version, the instance of LiteLLM running on the remote web server is prior to 1.48.18. It is, therefore, affected by a Server-Side Request Forgery vulnerability in the chat completion.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This
    vulnerability allows users to specify the `api_base` parameter when making requests to `POST
    /chat/completions`, causing the application to send the request to the domain specified by `api_base`.
    This request includes the OpenAI API key. A malicious user can set the `api_base` to their own domain and
    intercept the OpenAI API key, leading to unauthorized access and potential misuse of the API key.
    (CVE-2024-6587)

ID	Name	Product	Family	Severity
114623	LiteLLM < 1.48.18 Server-Side Request Forgery	Web App Scanning	Artificial Intelligence	high
414784	SCA: security update for litellm (GHSA-g26j-5385-hhw3)	Tenable Cloud Security	SCA Checks	high
414784	SCA: security update for litellm (GHSA-g26j-5385-hhw3)	Tenable Self-Hosted Container Security	SCA Checks	high

Detections

Analytics

CVE-2024-6587

high

Tenable Plugins

high

high

high