Detections
Analytics
SCA: security update for litellm (GHSA-xqmj-j6mv-4862)
high Tenable Cloud Security Plugin ID 440818
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.80.5
to before version 1.83.7, the POST /prompts/test endpoint accepted user-supplied prompt templates and
rendered them without sandboxing. A crafted template could run arbitrary code inside the LiteLLM Proxy
process. The endpoint only checks that the caller presents a valid proxy API key, so any authenticated
user could reach it. Depending on how the proxy is deployed, this could expose secrets in the process
environment (such as provider API keys or database credentials) and allow commands to be run on the host.
This issue has been patched in version 1.83.7. (CVE-2026-42203)
Solution
Update the litellm library and its related packages to version 1.83.7 or later.See Also
Plugin Details
Severity: High
ID: 440818
Version: Revision 1.10
Type: Local
Family: SCA Checks
Published: 4/24/2026
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 6.9
Percentile: 96.92
Vendor
Vendor Severity: High
CVSS v2
Risk Factor: High
Base Score: 9
Temporal Score: 7
Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2026-42203
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 7.9
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
CVSS v4
Risk Factor: High
Base Score: 8.6
Threat Score: 7.3
Threat Vector: CVSS:4.0/E:P
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 4/24/2026
Vulnerability Publication Date: 4/24/2026
Reference Information
CVE: CVE-2026-42203
cwe: CWE-1336