LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.80.5 to before version 1.83.7, the POST /prompts/test endpoint accepted user-supplied prompt templates and rendered them without sandboxing. A crafted template could run arbitrary code inside the LiteLLM Proxy process. The endpoint only checks that the caller presents a valid proxy API key, so any authenticated user could reach it. Depending on how the proxy is deployed, this could expose secrets in the process environment (such as provider API keys or database credentials) and allow commands to be run on the host. This issue has been patched in version 1.83.7.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.80.5
    to before version 1.83.7, the POST /prompts/test endpoint accepted user-supplied prompt templates and
    rendered them without sandboxing. A crafted template could run arbitrary code inside the LiteLLM Proxy
    process. The endpoint only checks that the caller presents a valid proxy API key, so any authenticated
    user could reach it. Depending on how the proxy is deployed, this could expose secrets in the process
    environment (such as provider API keys or database credentials) and allow commands to be run on the host.
    This issue has been patched in version 1.83.7. (CVE-2026-42203)

ID	Name	Product	Family	Type	Severity
462653	Echo: litellm: security update to 1.83.7	Tenable Cloud Security	Echo Local Security Checks	Local	high
462653	Echo: litellm: security update to 1.83.7	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
440818	SCA: security update for litellm (GHSA-xqmj-j6mv-4862)	Tenable Cloud Security	SCA Checks	Local	high
440818	SCA: security update for litellm (GHSA-xqmj-j6mv-4862)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-42203

high

Tenable Plugins

high

high

high

high