Bug 2525164 (CVE-2026-37004)
| Summary: | CVE-2026-37004 litellm: berriai: litellm: Arbitrary OS command execution via Server-Side Template Injection | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | urgent | Docs Contact: | |
| Priority: | urgent | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in litellm. This Server-Side Template Injection (SSTI) vulnerability allows unauthenticated remote attackers to execute arbitrary operating system (OS) commands. The flaw occurs due to the use of an unsandboxed jinja2.Environment, which can be exploited by crafting a malicious `dotprompt_content` parameter in the `/prompts/test` endpoint.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-08-27 20:11:53 UTC
|