GitHub Advisoryadvisory · PyPI

GHSA-6wvf-77m9-58rm LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint

CRITICAL Published 2026-08-27 Modified 2026-09-08 Official page ↗
Aliases
CVE-2026-37004
Ecosystem
PyPI
Packages
litellm
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1336
Reviewed
2026-09-08

Affected packages

• PyPI litellm: < 1.83.7 → fixed in 1.83.7

Description

BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment.

Related

Alias · CVE (1)

  • CVE-2026-37004 BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute… vulnerability

Weakness · CWE (1)

  • CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine weakness

References