Authenticated file deletion via trusted upload filename
Published Jun 6, 2024 · Updated Nov 3, 2024
Path-based file deletion in Berri AI LiteLLM before 1.35.36 allows remote authenticated users to delete server files through an audio request. The /audio/transcriptions handler passes the uploaded filename to os.remove without replacing or validating the path, so it removes the named local file. High-privileged proxy access is required, and deletion is limited to files writable by the LiteLLM process but can include configuration, keys, or databases.
Summary
What happened
Path-based file deletion in Berri AI LiteLLM before 1.35.36 allows remote authenticated users to delete server files through an audio request. The /audio/transcriptions handler passes the uploaded filename to os.remove without replacing or validating the path, so it removes the named local file. High-privileged proxy access is required, and deletion is limited to files writable by the LiteLLM process but can include configuration, keys, or databases.
The record
- CVE
- CVE-2024-4888
- Published
- Jun 6, 2024
- Updated
- Nov 3, 2024
- Vendor
- Berri AI
- Product
- LiteLLM
- Classifications
- CWE-862, T1485
- Attack vector
- network
- Privileges
- admin
Timeline
How it unfolded
- Jun 6, 2024CVE publishedPublication date reported by the CVE source.
- Nov 3, 2024Record updatedLatest update available in the CVE record.
Exploitability
Present is not the same as exploitable
Compare your product and version with the public record. A matching version still requires validation against your environment.
Is a vulnerable build present?
Compare these published version ranges with your installed build and any vendor patches.
- Affected versionversion=1.34.41
- Affected versionversion=unspecified <=latest
What conditions does exploitation require?
What is affected?
Attacks
What attackers are doing with it
Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.
Public exploit references
No public exploit references are available in this record.
Labels summarize the accepted research assessment. They do not indicate a test against your environment.
Technologies
Your stack
See the directory against your own environment.
Your stack
Check the software in your environment
Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.
Book a demo