---
id: CVE-2024-4264
aliases:
  - GHSA-7ggm-4rjg-594w
  - PYSEC-2026-1542
title: litellm passes untrusted data to `eval` function without sanitization
summary: litellm passes untrusted data to `eval` function without sanitization
severity: high
cvss: 7.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'
vendor: litellm
product: litellm
ecosystem: pip
affected:
  - litellm <= 1.28.11
published: '2024-05-18'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T03:50:13.427652069Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-7ggm-4rjg-594w'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-4264'
  - url: 'https://github.com/BerriAI/litellm'
  - url: >-
      https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2104-L2108
  - url: >-
      https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2118
  - url: >-
      https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2509-L2517
  - url: >-
      https://github.com/BerriAI/litellm/blob/main/litellm/proxy/proxy_server.py#L2562-L2577
  - url: 'https://github.com/BerriAI/litellm/blob/main/litellm/utils.py#L9867-L9885'
  - url: 'https://huntr.com/bounties/a3221b0c-6e25-4295-ab0f-042997e8fc61'
tags:
  - osv
  - pip
epss: 0.00883
epssPercentile: 0.5766
ingestedAt: '2026-07-08T18:25:46.996Z'
---

## Overview

A remote code execution (RCE) vulnerability exists in the berriai/litellm project due to improper control of the generation of code when using the `eval` function unsafely in the `litellm.get_secret()` method. Specifically, when the server utilizes Google KMS, untrusted data is passed to the `eval` function without any sanitization. Attackers can exploit this vulnerability by injecting malicious values into environment variables through the `/config/update` endpoint, which allows for the update of settings in `proxy_server_config.yaml`.

## Affected packages

- `litellm <= 1.28.11`

## Remediation

Refer to the advisory for the patched release.