{"id":"CVE-2024-4888","aliases":["GHSA-3xr8-qfvj-9p9j","PYSEC-2026-1540"],"title":"Arbitrary file deletion in litellm","summary":"Arbitrary file deletion in litellm","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","vendor":"litellm","product":"litellm","ecosystem":"pip","affected":["litellm < 1.35.36"],"patched":["litellm 1.35.36"],"published":"2024-06-06","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:49:18.835971080Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-3xr8-qfvj-9p9j","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4888"},{"url":"https://github.com/BerriAI/litellm/pull/3193"},{"url":"https://github.com/BerriAI/litellm"},{"url":"https://huntr.com/bounties/48461d89-cf13-4ad3-a43e-0d37da08fc6c"}],"tags":["osv","pip"],"epss":0.00619,"epssPercentile":0.48286,"ingestedAt":"2026-07-08T18:25:45.212Z","slug":"CVE-2024-4888","body":"## Overview\n\nBerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on the `/audio/transcriptions` endpoint. An attacker can exploit this vulnerability by sending a specially crafted request that includes a file path to the server, which then deletes the specified file without proper authorization or validation. This vulnerability is present in the code where `os.remove(file.filename)` is used to delete a file, allowing any user to delete critical files on the server such as SSH keys, SQLite databases, or configuration files. \n\n## Affected packages\n\n- `litellm < 1.35.36`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `litellm 1.35.36`","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}