Vulnerability PYSEC-2026-3861
Critical
CRITICAL RISK
CVSS Score: 9.8
Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
20 days ago
September 10, 2026 at 09:44 AM UTC
LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint
0.1.0 - 1.83.6
0.1.0 - 1.83.6
Summary
LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint
Details
BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
3 hours ago
LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters
0.1.0 - 1.88.5 and 1.89.0 - 1.89.6 and 1.90.0 - 1.90.6 and 1.91.0 - 1.91.4 and 1.92.0 - 1.92.1 and 1.93.0 - 1.93.1 and 1.94.0 - 1.94.2 and 1.95.0 and 1.96.0 GHSA-3cv6-jpf6-8222
0.1.0 - 1.88.5 and 1.89.0 - 1.89.6 and 1.90.0 - 1.90.6 and 1.91.0 - 1.91.4 and 1.92.0 - 1.92.1 and 1.93.0 - 1.93.1 and 1.94.0 - 1.94.2 and 1.95.0 and 1.96.0 GHSA-3cv6-jpf6-8222
Medium Risk
13 days ago
LiteLLM Proxy has server-side request forgery via the `user_config` request parameter
0.1.0 - 1.83.8 GHSA-hx8v-g79f-8w5f
0.1.0 - 1.83.8 GHSA-hx8v-g79f-8w5f
Critical
1 month ago
LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint
0.1.0 - 1.83.6 GHSA-6wvf-77m9-58rm
0.1.0 - 1.83.6 GHSA-6wvf-77m9-58rm
Unknown
2 months ago
LiteLLM: Local file read via request-supplied OIDC file references
0.1.0 - 1.83.9 PYSEC-2026-3476
0.1.0 - 1.83.9 PYSEC-2026-3476
Unknown
2 months ago
LiteLLM: Arbitrary file write via path traversal in Skills archive extraction
0.1.0 - 1.83.6 PYSEC-2026-3477
0.1.0 - 1.83.6 PYSEC-2026-3477
Impacted packages
Timeline
Published
20 days ago
September 10, 2026 at 09:44 AM UTC
Fixed (1.83.7)
5 months ago
April 13, 2026 at 05:34 PM UTC
Last Modified
20 days ago
September 10, 2026 at 12:15 PM UTC