{"data":{"id":"0fd02a0d-7bf5-45bd-be7c-ff62381e18a4","title":"CVE-2026-42203: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.80.5 to before…","summary":"LiteLLM, an AI gateway proxy that calls LLM APIs in OpenAI or native format, is affected from version 1.80.5 up to but not including 1.83.7. The POST /prompts/test endpoint rendered user-supplied prompt templates without sandboxing, so a crafted template could run arbitrary code inside the LiteLLM Proxy process. Any caller holding a valid proxy API key can reach the endpoint, and depending on deployment this may expose environment secrets such as provider API keys or database credentials and allow commands on the host.","solution":"Fixed in 1.83.7.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-42203","publishedAt":"2026-05-08T04:16:19.450Z","cveId":"CVE-2026-42203","cweIds":["CWE-1336"],"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["litellm@>= 1.80.5, < 1.83.7 (fixed: 1.83.7)"],"affectedPackageNames":["litellm"],"affectedPackageRefs":["pypi:litellm"],"affectedVendors":[],"affectedVendorsRaw":["LiteLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LiteLLM code execution through prompt template rendering in /prompts/test","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00373,"epssCheckedAt":"2026-11-10T00:11:23.429Z","kevDateAdded":null,"advisoryAliases":["GHSA-xqmj-j6mv-4862"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:47.994Z","patchAvailable":true,"disclosureDate":"2026-05-08T04:16:19.450Z","fixReleasedAt":"2026-04-13T17:34:58.360Z","daysToFix":-25,"fixCheckedAt":"2026-10-29T21:36:42.745Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"litellm","fixedVersion":"1.83.7","matchedVersion":"1.83.7","fixReleasedAt":"2026-04-13T17:34:58.360Z","daysToFix":-25,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:42.597Z"}]}}