8.8
High
CVE-2026-40217 LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the…
Description
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| litellm | Versions not published | |
| Red Hat Ansible Automation Platform 2.6 1780102732 | earliest → < 1780102732 | 1780102732 |
| Red Hat OpenShift AI 3.3 1782310008 | earliest → < 1782310008 | 1782310008 |
| Lightspeed Core | Versions not published | |
| Red Hat OpenShift AI (RHOAI) | Versions not published |
References
- www.x41-dsec.de www.x41-dsec.de
Timeline
- Published
- Last modified
Other CVEs of litellm
The 40 CVEs of litellm →
CVE-2026-114612
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
9.9
Critical
CVE-2026-108575
A vulnerability has been found in BerriAI LiteLLM up to 1.94.0
5.3
Medium
CVE-2026-108574
A flaw has been found in BerriAI LiteLLM up to 1.95.0
5.3
Medium
CVE-2026-93355
LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured…
7.6
High