LiteLLM < 1.25.0 - Remote Code Execution

LiteLLM before 1.25.0 allows authenticated users with the master API key to execute arbitrary Python code through the /guardrails/testcustomcode endpoint intended for custom guardrail testing. The endpoint’s insufficient filtering mechanisms can be bypassed, allowing attackers to abuse Python’s...

CVE-2026-40217-PoC

CVE-2026-40217 — Evasione dalla sandbox di LiteLLM Guardrail LiteLLM POST /guardrails/testcustomcode — Evasione dalla sandbox che porta a Remote Code Execution RCE come root nella distribuzione Docker predefinita. Campo| Valore ---|--- CVE| CVE-2026-40217 CVSS| 8.8 ALTO —...

CVE-2026-40217

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/testcustomcode URI...