PT-2026-31920 · Berriai · Litellm

Published 2026-04-10 · Updated 2026-04-10 · CVE-2026-40217

Mitre

CVSS v3.1

8.8

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test custom code URI.

Fix

Weakness Enumeration

CWE-420

Related Identifiers

CVE-2026-40217

Affected Products

Litellm

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-40217 · Security Note
• https://x41-dsec.de/lab/advisories/x41-2026-001-litellm · Note