Server-Side Template Injection in BerriAI Litellm Software
CVE-2026-37004

9.8CRITICAL

Key Information:

Vendor

BerriAI

Status
litellm
Vendor
CVE Published:
27 August 2026

What is CVE-2026-37004?

The BerriAI Litellm software version 1.82.4 and earlier is susceptible to Server-Side Template Injection (SSTI), which can allow unauthenticated remote attackers to execute arbitrary OS commands. This vulnerability is found in the '/prompts/test' endpoint due to the improper use of an unsandboxed jinja2.Environment. Attackers can exploit this flaw by submitting a crafted 'dotprompt_content' parameter, potentially compromising the security of the affected systems.

References

https://github.com/BerriAI/litellm/blob/244bdffd1bfe7bebd...
https://yerangamage.com/cves/detail/?slug=litellm-ssti-rce

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.