Code Injection

LiteLLM is vulnerable to Code Injection. The vulnerability is due to insufficient sandboxing and validation of custom Python code submitted through the Custom Code Guardrails create and update paths, which allows a privileged attacker with guardrail management access to execute arbitrary Python...

EUVD-2026-42350

LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks...