Server-Side Template Injection (SSTI) Vulnerability in BerriAI/litellm

CVE-2024-2952

What is CVE-2024-2952?

BerriAI's Litellm product is compromised by a vulnerability allowing Server-Side Template Injection (SSTI) through the /completions endpoint. The issue stems from the hf_chat_template method inadequately processing the chat_template parameter originating from the tokenizer_config.json file. This lack of proper sanitization enables attackers to craft malicious tokenizer_config.json files that can execute arbitrary code on the server. Without stringent checks and validation, the exploitation poses significant security risks, allowing for unauthorized commands to be run with the privileges of the server.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References