EUVD-2026-21376

LiteLLM has a sandbox escape in custom-code guardrail...

CVE-2026-40217

CVE-2026-40217 affects LiteLLM up to 2026-04-08, where POST /guardrails/test_custom_code allows bytecode-level sandbox escape, enabling arbitrary code execution in the proxy process (runs as root in default Docker). The issue is confirmed by OSV PYSEC-2026-2601, which notes a sandbox escape in th...