Description
BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run arbitrary commands on the host.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| ansible-automation-platform-26/lightspeed-chatbot-rhel9 | Red Hat / Red Hat Ansible Automation Platform 2 | any version | unknown |
| ansible-automation-platform-27/lightspeed-chatbot-rhel9 | Red Hat / Red Hat Ansible Automation Platform 2 | any version | unknown |
| exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 | Red Hat / Exploit Intelligence | any version | unknown |
| litellm | BerriAI / litellm | >= 1.74.2, < 1.83.7 | affected |
| rhoai/odh-llama-stack-core-rhel9 | Red Hat / Red Hat OpenShift AI 2.25 | >= 1781826406, < * | unaffected |
| rhoai/odh-llama-stack-core-rhel9 | Red Hat / Red Hat OpenShift AI 3.3 | >= 1782310008, < * | unaffected |
| rhoai/odh-mlflow-rhel9 | Red Hat / Red Hat OpenShift AI (RHOAI) | any version | unknown |
| rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9 | Red Hat / Red Hat OpenShift AI 3.4 | >= 1781622627, < * | unaffected |