CVE-2026-40217

Published: Apr 10, 2026Modified: Jul 15, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: MITRE (Secondary)

Description

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.

Affected (1)

Products: Litellm: Litellm

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Litellm Litellm	Up to 2026-04-08

Related CWEs

Unprotected Alternate Channel

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (6)

https://www.x41-dsec.de/lab/advisories/x41-2026-001-litellm/

Source: cve@mitre.org

ExploitMitigationThird Party Advisory

https://access.redhat.com/errata/RHSA-2026:24866

Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

https://access.redhat.com/errata/RHSA-2026:30056

Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

https://access.redhat.com/security/cve/CVE-2026-40217

Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

https://bugzilla.redhat.com/show_bug.cgi?id=2457301

Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40217.json

Source: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

Timeline

No history available yet.