CVE-2024-4264: LiteLLM Unsafe Eval Remote Code Execution
LiteLLM, berriai/litellm
A remote code execution vulnerability in LiteLLM passes unsanitized environment variables into the eval function. The issue impacts versions up to 1.28.11.
disclosed CVENo confirmed exploitation, so this record is tracked as a disclosed vulnerability and not counted as an incident. It moves into the counts if CISA or the vendor confirms exploitation. Why
- CVSS
- 7.2
- EPSS
- 0.01 · top 41% · 2026-11-13
- fix status
- Fix status unknown
- first report
- 18 May 2024
- last update
- 18 May 2024
- CVE ids
Timeline · 1
Sources · 1
Advisories and databases
- 2024-05-18CVE-2024-4264: litellm passes untrusted data to `eval` function without sanitizationGitHub Advisory Database · github.com/advisories/GHSA-7ggm-4rjg-594w
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- Attack on AI
- categories
- Infrastructure vulnerability
- severity
- 2 · Disclosed vulnerability
- fix status
- Fix status unknown
- targets
- Framework / tooling
- owasp llm top 10
- LLM03:2025 Supply Chain
- mitre atlas
- no technique for these categories
- dates
- happened 18 May 2024 · first reported 18 May 2024
- origin
- GitHub Advisory DatabaseVulnerability record from NVD / the GitHub Advisory Database. This product uses the NVD API but is not endorsed or certified by the NVD.
- record
- confidence 0.95 · created 2026-10-18 07:00Z · updated 2026-10-18 07:00Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# CVE-2024-4264: LiteLLM Unsafe Eval Remote Code Execution https://gcdradar.vercel.app/incidents/cve-2024-4264-litellm-unsafe-eval-remote-code-execution · AIR-2024-0110 · closed 2024-05-18 - Lane: Patch now - Severity: 2 (Disclosed vulnerability) - Fix status: Fix status unknown - First reported: 2024-05-18 - AI role: Attack on AI - Products: LiteLLM, berriai/litellm - CVE ids: CVE-2024-4264 - CVSS: 7.2 ## Summary A remote code execution vulnerability in LiteLLM passes unsanitized environment variables into the eval function. The issue impacts versions up to 1.28.11. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2024-05-18: CVE-2024-4264: litellm passes untrusted data to `eval` function without sanitization (https://github.com/advisories/GHSA-7ggm-4rjg-594w) ## Sources - 2024-05-18 GitHub Advisory Database: CVE-2024-4264: litellm passes untrusted data to `eval` function without sanitization https://github.com/advisories/GHSA-7ggm-4rjg-594w Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closed4.9LiteLLM CVE-2024-4890: SQL Injection Vulnerability in LiteLLM
Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-4890
AI - closed8.7LiteLLM CVE-2024-6587: LiteLLM Server-Side Request Forgery vulnerability
Patch now · Disclosed · since 13 Sep 2024 · CVE-2024-6587
AI - closed9.8LiteLLM LiteLLM Server-Side Template Injection in Completions Endpoint
Patch now · Disclosed · since 10 Apr 2024 · CVE-2024-2952
AI - closed3.5LiteLLM CVE-2025-11203: LiteLLM information disclosure vulnerability in health endpoint
Patch now · Disclosed · since 29 Oct 2025 · CVE-2025-11203
AI - closed5.4LiteLLM CVE-2025-45809: SQL injection vulnerability in BerriAI LiteLLM
Patch now · Disclosed · since 3 Jul 2025 · CVE-2025-45809
AI - closed7.5LiteLLM CVE-2024-10188: LiteLLM Vulnerable to Denial of Service
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-10188
AI