Detections
Analytics

Echo: litellm: security update to 1.83.7

high Tenable Cloud Security Plugin ID 462653

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.80.5
 to before version 1.83.7, the POST /prompts/test endpoint accepted user-supplied prompt templates and
 rendered them without sandboxing. A crafted template could run arbitrary code inside the LiteLLM Proxy
 process. The endpoint only checks that the caller presents a valid proxy API key, so any authenticated
 user could reach it. Depending on how the proxy is deployed, this could expose secrets in the process
 environment (such as provider API keys or database credentials) and allow commands to be run on the host.
 This issue has been patched in version 1.83.7. (CVE-2026-42203)

Solution

Update the litellm library and its related packages to version 1.83.7 or later.

Plugin Details

Severity: High

ID: 462653

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 6.9

Percentile: 96.92

CVSS v2

Risk Factor: High

Base Score: 9

Temporal Score: 7

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-42203

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS v4

Risk Factor: High

Base Score: 8.6

Threat Score: 7.3

Threat Vector: CVSS:4.0/E:P

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 6/28/2026

Vulnerability Publication Date: 4/24/2026

Reference Information

CVE: CVE-2026-42203