Lucene search
+L

17 matches found

OSV
OSV
•added 2026/09/10 9:44 a.m.•6 views

PYSEC-2026-3861 LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint

BerriAI litellm =1.82.4 is vulnerable to Server-Side Template Injection SSTI, which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotpromptcontent parameter in the /prompts/test endpoint due to use of an unsandboxed jinja2.Environment...

9.8CVSS6.5AI score0.00799EPSS
SaveExploits0References8
Rows per page
Query Builder