CVE-2026-37004CWE-1336

CVE-2026-37004

Critical · published August 28, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00799 · 56.1th percentile
Weakness
CWE-1336 · Improper Neutralization of Special Elements Used in a Template Engine
Published
2026-08-28T00:17Z
References (2)
https://github.com/BerriAI/litellm/blob/244bdffd1bfe7bebdfdef516e1ebe426a898e2f0/litellm/proxy/prompts/prompt_endpoints.py#L1073 · [email protected]https://yerangamage.com/cves/detail/?slug=litellm-ssti-rce · [email protected]
EPSS history
Timeline
  • 27 AUG 00:00Z
    BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands…
    cvelistv5