Description

In berriai/litellm before version 1.44.12, the `litellm/litellm_core_utils/litellm_logging.py` file contains a vulnerability where the API key masking code only masks the first 5 characters of the key. This results in the leakage of almost the entire API key in the logs, exposing a significant amount of the secret key. The issue affects version v1.44.9.

INFO

Published Date :

2025-03-20T10:09:24.180Z

Last Modified :

2025-03-20T18:55:27.073Z

Source :

@huntr_ai
AFFECTED PRODUCTS

The following products are affected by CVE-2024-9606 vulnerability.

Vendors Products
Litellm
  • Litellm
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-9606.

URL Resource
https://github.com/berriai/litellm/commit/9094071c4782183e84f10630e2450be3db55509a cve-icon cve-icon
https://huntr.com/bounties/4a03796f-a8d4-4293-84ef-d3959456223a cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact