8.6
High
CVE-2026-42203 LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
Description
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.80.5 to before version 1.83.7, the POST /prompts/test endpoint accepted user-supplied prompt templates and rendered them without sandboxing. A crafted template could run arbitrary code inside the LiteLLM Proxy process. The endpoint only checks that the caller presents a valid proxy API key, so any authenticated user could reach it. Depending on how the proxy is deployed, this could expose secrets in the process environment (such as provider API keys or database credentials) and allow commands to be run on the host. This issue has been patched in version 1.83.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| litellm 1.80 | 1.80.5 → < 1.83.7 | 1.83.7 |
| Red Hat Ansible Automation Platform 2 | Versions not published | |
| Exploit Intelligence | Versions not published | |
| Red Hat OpenShift AI (RHOAI) | Versions not published |
References
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of litellm
The 40 CVEs of litellm →
CVE-2026-114612
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
9.9
Critical
CVE-2026-108575
A vulnerability has been found in BerriAI LiteLLM up to 1.94.0
5.3
Medium
CVE-2026-108574
A flaw has been found in BerriAI LiteLLM up to 1.95.0
5.3
Medium
CVE-2026-93355
LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured…
7.6
High