EUVD-2026-21376

LiteLLM has a sandbox escape in custom-code guardrail...

CVE-2026-40217

A flaw was found in LiteLLM. A remote attacker can exploit this flaw by performing bytecode rewriting at the /guardrails/testcustomcode URI. This could lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. Mitigation Mitigation for this issue is...

CVE-2026-40217

CVE-2026-40217 affects LiteLLM up to 2026-04-08, where POST /guardrails/test_custom_code allows bytecode-level sandbox escape, enabling arbitrary code execution in the proxy process (runs as root in default Docker). The issue is confirmed by OSV PYSEC-2026-2601, which notes a sandbox escape in th...

CVE-2026-40217

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/testcustomcode URI...

CVE-2026-40217

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/testcustomcode URI...

LiteLLM 安全漏洞

LiteLLM is an open-source application developed by Berri AI. It allows for the invocation of all LLM APIs in the OpenAI format. Versions of LiteLLM dated before April 8, 2026, contain a security vulnerability. This vulnerability stems from the /guardrails/testcustomcode URI, which allows arbitrar...

PT-2026-31920

Name of the Vulnerable Software and Affected Versions LiteLLM versions prior to 1.83.11 Description A flaw in the proxy server allows remote attackers to execute arbitrary code via bytecode rewriting. The issue exists because the POST /guardrails/test custom code endpoint runs user-supplied Pytho...