Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| litellm | pip | < 1.83.7 | 1.83.7 |
Miggo AIRoot Cause AnalysisThe vulnerability CVE-2026-37004 describes a Server-Side Template Injection (SSTI) in LiteLLM's /prompts/test endpoint, caused by the use of an unsandboxed jinja2.Environment. The provided commit d910a95661fce3cdd36f3b06c03ecf9c46c6457c directly addresses this issue. The patch modifies litellm/integrations/dotprompt/prompt_manager.py, specifically within the PromptManager class's __init__ method. The change replaces the instantiation of jinja2.Environment with jinja2.sandbox.ImmutableSandboxedEnvironment. This clearly indicates that the PromptManager.__init__ method, in its state prior to this commit, was responsible for creating the vulnerable unsandboxed Jinja2 environment. When the /prompts/test endpoint processed user input, it would have utilized this unsandboxed environment, leading to the SSTI vulnerability. Therefore, PromptManager.__init__ is the precise function that contained the vulnerability, as it was responsible for initializing the insecure template engine.
PromptManager.__init__litellm/integrations/dotprompt/prompt_manager.py