PT-2026-31920 · Litellm · Litellm

Markus Vervier · CVE-2026-40217 · Publicado 2026-02-19 · Atualizado 2026-07-21

Positive Technologies (AI Summary) · Pt

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LiteLLM versões até 2026-04-08

Description LiteLLM até 2026-04-08 permite que atacantes remotos executem código arbitrário por meio de reescrita de bytecode no URI /guardrails/test custom code.

Recommendations Atualize o LiteLLM para uma versão posterior a 2026-04-08.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

CWE-420

CWE-913

Identificadores relacionados

BDU:2026-08668

CLEANSTART-2026-AZ09261

CLEANSTART-2026-HP19968

CLEANSTART-2026-IR98353

CLEANSTART-2026-MR94452

CLEANSTART-2026-NL78203

CLEANSTART-2026-WQ85001

CLEANSTART-2026-WU03167

CVE-2026-40217

ECHO-C6D4-CF5F-A050

GHSA-3926-2JVF-FG29

GHSA-WXXX-GVQV-XP7P

PYSEC-2026-2601

Produtos afetados

Litellm

Referências · 205

• 🔥 https://x41-dsec.de/lab/advisories/x41-2026-001-litellm · Exploit
• https://github.com/BerriAI/litellm · Nota
• https://github.com/BerriAI/litellm/security/advisories/GHSA-wxxx-gvqv-xp7p · Nota
• https://github.com/BerriAI/litellm/releases/tag/v1.83.10-stable · Nota
• https://github.com/BerriAI/litellm/releases/tag/v1.83.14-stable · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-HP19968.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WU03167.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-IR98353.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NL78203.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WQ85001.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-AZ09261.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MR94452.json · Nota
• https://osv.dev/vulnerability/CVE-2026-34518 · Nota
• https://osv.dev/vulnerability/CLEANSTART-2026-AZ09261 · Aviso do Fabricante
• https://osv.dev/vulnerability/ghsa-v92g-xgxw-vvmm · Nota