Lucene search
+L

4 matches found

OSV
OSV
added 2026/07/07 11:45 a.m.14 views

PYSEC-2026-1542 litellm passes untrusted data to `eval` function without sanitization

A remote code execution RCE vulnerability exists in the berriai/litellm project due to improper control of the generation of code when using the eval function unsafely in the litellm.getsecret method. Specifically, when the server utilizes Google KMS, untrusted data is passed to the eval function...

7.2CVSS6.6AI score0.00883EPSS
SaveExploits0References10
Rows per page
Query Builder