CVE-2024-6825

BerriAI/litellm version 1.40.12 contains a vulnerability that allows remote code execution. The issue exists in the handling of the 'post_call_rules' configuration, where a callback function can be added. The provided value is split at the final '.' mark, with the last part considered the function name and the remaining part appended with the '.py' extension and imported. This allows an attacker to set a system method, such as 'os.system', as a callback, enabling the execution of arbitrary commands when a chat response is processed.

• CWE-94

• https://github.com/berriai/litellm/commit/441c7275ed2715f47650a7c2e525055c804073a9
• https://huntr.com/bounties/1d98bebb-6cf4-46c9-87c3-d3b1972973b5Exploit, Third Party Advisory

Published

Mar 20, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-6819IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code E…7.8
• CVE-2024-6820IrfanView AWD File Parsing Out-Of-Bounds Write Remote Code E…7.8
• CVE-2024-6821IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code E…7.8
• CVE-2024-6822IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code E…7.8
• CVE-2024-6823The Media Library Assistant plugin for WordPress is vulnerab…8.8
• CVE-2024-6824The Premium Addons for Elementor plugin for WordPress is vul…4.3
• CVE-2024-6826An issue has been discovered in GitLab CE/EE affecting all v…6.5
• CVE-2024-6827Gunicorn version 21.2.0 does not properly validate the value…7.5
• CVE-2024-6828The Redux Framework plugin for WordPress is vulnerable to un…7.2
• CVE-2024-6829A vulnerability in aimhubio/aim version 3.19.3 allows an att…9.1
• CVE-2024-6830A vulnerability, which was classified as critical, was found…7.5
• CVE-2024-6831Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Pro…4.4