CVE-2026-37004: n/a

CVE-2026-37004 describes a Server-Side Template Injection vulnerability in BerriAI litellm versions up to 1.82.4. The vulnerability arises because the application uses an unsandboxed jinja2.Environment to process templates, specifically in the /prompts/test endpoint's dotprompt_content parameter. This allows unauthenticated remote attackers to inject and execute arbitrary OS commands on the server, leading to full compromise. The vulnerability is classified under CWE-1336 and has a CVSS v3.1 base score of 9.8, indicating critical impact across confidentiality, integrity, and availability.

Successful exploitation allows unauthenticated remote attackers to execute arbitrary operating system commands on the affected server. This can lead to complete system compromise, including data theft, service disruption, and further network penetration. The vulnerability affects confidentiality, integrity, and availability with a critical severity rating.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the /prompts/test endpoint and avoid exposing the vulnerable service to untrusted networks. Monitor for unusual activity related to template rendering. Do not rely on generic mitigations as the vulnerability specifically involves unsandboxed template execution.