LiteLLM < 1.25.0 - Remote Code Execution

LiteLLM before 1.25.0 allows authenticated users with the master API key to execute arbitrary Python code through the /guardrails/testcustomcode endpoint intended for custom guardrail testing. The endpoint’s insufficient filtering mechanisms can be bypassed, allowing attackers to abuse Python’s...

CVE-2026-40217-PoC

CVE-2026-40217 — Escape de la caja de arena de Guardrail de LiteLLM LiteLLM POST /guardrails/testcustomcode — Escape de la caja de arena que conduce a Ejecución Remota de Código RCE como root en la implementación predeterminada de Docker. Campo| Valor ---|--- CVE| CVE-2026-40217 CVSS| 8.8 ALTA —...

CVE-2026-40217

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/testcustomcode URI...

CVE-2026-40217: Unprotected Alternate Channel

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/testcustomcode URI...