---
id: CVE-2024-5751
title: >-
  BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can
  achieve remote code execution
summary: >-
  BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can
  achieve remote code execution. The vulnerability exists in the
  `add_deployment` function, which decodes and decrypts environment variables
  from base64 and ass…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-94
vendor: litellm
product: litellm
affected:
  - litellm = 1.35.8
published: '2024-06-27'
updated: '2026-06-17'
sourceUpdated: '2026-06-17T08:16:35.527'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-5751'
references:
  - url: 'https://huntr.com/bounties/ae623c2f-b64b-4245-9ed4-f13a0a5824ce'
    label: security@huntr.dev
  - url: 'https://huntr.com/bounties/ae623c2f-b64b-4245-9ed4-f13a0a5824ce'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
  - exploit-available
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2024-06-27T20:20:04.683432Z'
ingestedAt: '2026-09-13T14:35:31.243Z'
epss: 0.00882
epssPercentile: 0.57452
---

## Overview

BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the `add_deployment` function, which decodes and decrypts environment variables from base64 and assigns them to `os.environ`. An attacker can exploit this by sending a malicious payload to the `/config/update` endpoint, which is then processed and executed by the server when the `get_secret` function is triggered. This requires the server to use Google KMS and a database to store a model.

## Affected

- `litellm = 1.35.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.