SOURCE-LINKED INTELLIGENCE

GHSA-xqmj-j6mv-4862: LiteLLM: Server-Side Template Injection in /prompts/test endpoint

OSV AI package advisories · observation · Apr 24, 2026 · UTC

### Impact The `POST /prompts/test` endpoint accepted user-supplied prompt templates and rendered them without sandboxing. A crafted template could run arbitrary code inside the LiteLLM Proxy process. The endpoint only checks that the caller presents a valid proxy API key, so any authenticated user could reach it. Depending on how the proxy is deployed, this could expose secrets in the process environment (such as provider API keys or database credentials) and allow commands to be run on the host. Proxy deployments running an affected version are in scope. ### Patches The issue is fixed in **`

Read original source ↗ Open in workspace

recordType: vulnerability
status: active
evidenceStatus: reported
region: Global

Evidence & attribution

OSV AI package advisories · 2026-04-24T16:02:42.000Z
OSV AI package advisories · 2026-07-13T15:02:53.267Z

First collected: 2026-09-20T23:41:51.992Z. This is not the publication date.