CVE-2026-37004

BerriAI litellm versions up to and including 1.82.4 are affected by a Server-Side Template Injection (SSTI) vulnerability. The root cause is the use of an unsandboxed jinja2.Environment in the /prompts/test endpoint, which allows unauthenticated remote attackers to execute arbitrary OS commands b...