{"data":{"id":"531a35bd-4eda-45bd-abd4-a2d3e5448144","title":"CVE-2026-37004: BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote att","summary":"BerriAI litellm version 1.82.4 and earlier has a vulnerability called SSTI (server-side template injection, where attackers can inject malicious code into templates that the server processes). An attacker without authentication can send a specially crafted request to the /prompts/test endpoint that executes arbitrary OS commands (any commands on the server's operating system) because the software uses jinja2.Environment (a template processor) without proper security restrictions.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-37004","publishedAt":"2026-08-27T20:17:41.270Z","cveId":"CVE-2026-37004","cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["BerriAI litellm"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-27T20:17:41.270Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","availability","confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}