1 matches found
LiteLLM: Server-Side Template Injection in /prompts/test endpoint
ImpactThe POST /prompts/test endpoint accepted user-supplied prompt templates and rendered them without sandboxing. A crafted template could run arbitrary code inside the LiteLLM Proxy process.The endpoint only checks that the caller presents a valid proxy API key, so any authenticated user could...
8.8CVSS6.2AI score0.00373EPSS
SaveExploits1References6Affected Software1
20