CVE-2024-10188 HIGH

CVE-2024-10188: Denial of Service in BerriAI/litellm

Vendor Berriai
Product berriai/litellm
Weakness CWE-400
Published March 20, 2025
Last update March 20, 2025

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service (DoS) by exploiting the use of ast.literal_eval to parse user input. This function is not safe and is prone to DoS attacks, which can crash the litellm Python server.

Key dates

02Disclosure timeline

March 20, 2025 CVE published
March 20, 2025 Record updated