AdvisoriesToolsStatsChecklistSubmitGet the email
← All advisories
CVE-2026-37004criticalBroken access control2026-08-27

CVE-2026-37004: LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint

BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment.

01.

What it is

BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment.

02.

How to check

  1. Affected: litellm (pip) < 1.83.7.
  2. Compare your installed version with the range above (command below).
03.

How to fix

  1. Upgrade litellm to 1.83.7 or later.
pip show litellm | grep Version
04.

Sources

More advisories for this tool
The weekly email

One email a week. Only what changed.

New advisories, CVEs and fixes for Lovable, Bolt, v0, Replit, Base44 and Cursor apps. No roundups of things you already read.