CRITICAL9.8

GHSA-6wvf-77m9-58rm

LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint

Quick fix

GHSA-6wvf-77m9-58rm — litellm: upgrade to the fixed version with the command below.

pip install --upgrade 'litellm>=1.83.7'

Details

BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/litellm

Introduced in: 0Fixed in: 1.83.7

Fixpip install --upgrade 'litellm>=1.83.7'

References

https://nvd.nist.gov/vuln/detail/CVE-2026-37004[ADVISORY]
https://github.com/BerriAI/litellm/commit/d910a95661fce3cdd36f3b06c03ecf9c46c6457c[WEB]
https://github.com/BerriAI/litellm[PACKAGE]
https://github.com/BerriAI/litellm/blob/244bdffd1bfe7bebdfdef516e1ebe426a898e2f0/litellm/proxy/prompts/prompt_endpoints.py#L1073[WEB]
https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable[WEB]
https://yerangamage.com/cves/detail/?slug=litellm-ssti-rce[WEB]