CVE-2026-37004criticalBroken access control2026-08-27
CVE-2026-37004: LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint
BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment.
What it is
BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment.
How to check
- Affected: litellm (pip) < 1.83.7.
- Compare your installed version with the range above (command below).
How to fix
- Upgrade litellm to 1.83.7 or later.
pip show litellm | grep VersionSources
More advisories for this tool