8.8
Élevée
CVE-2026-40217 LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the…
Description
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| litellm | Versions non publiées | |
| Red Hat Ansible Automation Platform 2.6 1780102732 | premières → < 1780102732 | 1780102732 |
| Red Hat OpenShift AI 3.3 1782310008 | premières → < 1782310008 | 1782310008 |
| Lightspeed Core | Versions non publiées | |
| Red Hat OpenShift AI (RHOAI) | Versions non publiées |
Références
- www.x41-dsec.de www.x41-dsec.de
Chronologie
- Publiée
- Dernière modification
Autres CVE de litellm
Les 40 CVE de litellm →
CVE-2026-114612
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format
9.9
Critique
CVE-2026-108575
A vulnerability has been found in BerriAI LiteLLM up to 1.94.0
5.3
Moyenne
CVE-2026-108574
A flaw has been found in BerriAI LiteLLM up to 1.95.0
5.3
Moyenne
CVE-2026-93355
LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured…
7.6
Élevée