CVE-2026-40217
High · 8.8CVSS
8.8
EPSS
3.4%
Published
Apr 10, 2026
CISA due date
—
The record
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-40435 When configured, IP-based access restrictions for httpd do not cover all endpoints, which… CWE-420
- CVE-2026-43505 An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5… CWE-420
- GHSA-3926-2jvf-fg29 Duplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrail CWE-420
- CVE-2026-35388 OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode… CWE-420
- CVE-2026-25916 Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is… CWE-420
- CVE-2025-41727 A local low privileged attacker can bypass the authentication of the Device Manager user… CWE-420
- CVE-2025-66432 In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their… CWE-420
- CVE-2025-56558 The Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by… CWE-420