A AegiFlow
CRITICALCVSS 9.8EPSS 0.5%

CVE-2026-37004

CVE-2026-37004 updated by NVD

Published
2026-08-27
Modified
2026-09-08
EPSS percentile
44%
Sources
github-advisory, nvd

Summary

BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment.

Affected packages

EcosystemPackageAffected versionsFixed versions
PyPIlitellm1.83.7

Remediation: Upgrade to 1.83.7 or later.

References

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.