Back to Database
Status published
High
CVE-2024-10188
Denial of Service in BerriAI/litellm
Vulnerability Description
A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service (DoS) by exploiting the use of ast.literal_eval to parse user input. This function is not safe and is prone to DoS attacks, which can crash the litellm Python server.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-10188
Credits & Attribution
No credits recorded in the NVD database.
References
More from berriai
View All →CVE-2025-0628
Improper Authorization in BerriAI/litellm
High
8.1
CVE-2025-0330
Exposure of Sensitive Information in berriai/litellm
High
7.5
CVE-2024-9606
Improper Output Neutralization for Logs in berriai/litellm
High
7.5
CVE-2024-8984
Denial of Service (DoS) in berriai/litellm
High
7.5
CVE-2024-6825
Remote Code Execution in BerriAI/litellm
High
8.8
Affected Vendor
berriai
View all reports →Affected Software
berriai/litellm
Vulnerable Versions:
unspecified
Timeline
Official Publish:
March 20th, 2025
Last Modified:
March 20th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H