CVE-2026-40217 Security Details

CVE ID

CVE-2026-40217

CWE

CWE-420

CWE-94

CVE Description

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.

Published

Apr 16, 2026

CVSS Score & Severity

8.8High

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.098%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

affected

Source

National Vulnerability Database

References

x41-dsec.deATTACK

GitHub · PR #25818PROJECT

GitHub · Advisory · GHSA-wxxx-gvqv-xp7pTHIRD_PARTY