CVE-2024-6587
A Server-Side Request Forgery (SSRF) vulnerability exists in berriai/litellm version 1.38.10. This vulnerability allows users to specify the `api_base` parameter when making requests to `POST /chat/completions`, causing the application to send the request to the domain specified by `api_base`. This request includes the OpenAI API key. A malicious user can set the `api_base` to their own domain and intercept the OpenAI API key, leading to unauthorized access and potential misuse of the API key.
Early warning: exploitation observed
- Exploitation observed since Aug 22, 2024
- Not yet in the official CISA catalogue
- Attacked 23 days before the vulnerability was made public
- Confirmed by sensors, not only by reports
Source: VulnCheck KEV · Sep 6, 2026 Sep 4, 2026 Sep 1, 2026 Aug 31, 2026 Aug 30, 2026 Aug 22, 2026
CVSS score7.5 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NWeakness type (CWE)CWE-918
Vendorslitellm
Affected products
| Vendors | Product | Versions |
|---|---|---|
| litellm | litellm | 1.38.10 |
Related articles
This product uses the NVD API but is not endorsed or certified by the NVD.