CVE Catalog
CVE-2026-40217
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk6.50%
93th percentile - higher than 93% of all known CVEs
Summary
A vulnerability in LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.
Risk Assessment
An attacker can take over the server, steal data, or disrupt service, posing a critical risk to the organization.
Recommendation
Immediately update LiteLLM to the latest version after 2026-04-08 or apply the available security patch.
Original NVD description (English source)
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.