Lucene search
+L

13 matches found

OSV
OSV
added 2026/07/13 3:2 p.m.3 views

PYSEC-2026-2602 LiteLLM: Server-Side Template Injection in /prompts/test endpoint

Impact The POST /prompts/test endpoint accepted user-supplied prompt templates and rendered them without sandboxing. A crafted template could run arbitrary code inside the LiteLLM Proxy process. The endpoint only checks that the caller presents a valid proxy API key, so any authenticated user cou...

8.6CVSS6.2AI score0.00373EPSS
SaveExploits1References6
Rows per page
Query Builder