Pypi · Litellm · CVE-2026-37004
**Name of the Vulnerable Software and Affected Versions**
litellm versions prior to 1.82.5
**Description**
An issue exists where unauthenticated remote attackers can execute arbitrary OS commands. This occurs due to the use of an unsandboxed jinja2.Environment, which enables Server-Side Template Injection (SSTI)—a flaw where an attacker injects malicious code into a template that is then executed on the server. The flaw is triggered via the `dotprompt content` parameter in the '/prompts/test' endpoint.
**Recommendations**
Update litellm to version 1.82.5 or later.
As a temporary workaround, avoid using the `dotprompt content` parameter in the '/prompts/test' endpoint.