FlagThis
← Back to CVE List
Vulnerability Intelligence Report

CVE-2026-40217

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.

Nuclei Template
CVSS Base Score
8.8
HIGH
Exploitability:2.9
Impact Score:5.9
EPSS Probability:6.50%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Weaknesses (CWE)

CWE-420 ↗CWE-420 Unprotected Alternate Channel

Affected Products & Versions

Vendor Product Affected Versions
BerriAI LiteLLM bb0639701796218a3447160e55c0f1097446e4e6085df7dfd39f476d4143743f (affected)

References & Technical Advisories

NVD Listing ↗ MITRE Listing ↗ GitHub Advisory ↗
No reference links found.

Threat Intelligence Signals

Nuclei Template
SCANNER AVAILABLE
EPSS Score
6.496%
GitHub Advisory
GHSA-wxxx-gvqv-xp7p ↗

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMITRE Corporation · N/A · USA
Reserved2026-04-10T13:43:22
Published2026-04-10T13:43:23
Last Updated2026-07-15T01:01:14

Related Intelligence

Related CVEs
CVE-2026-49468 CVSS 9.5 — LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or …
CVE-2026-35030 CVSS 9.4 — LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or …
CVE-2026-33634 CVSS 9.4 — Trivy is a security scanner. On March 19, 2026, a threat actor used co…
CVE-2026-42208 CVSS 9.3 — LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or …
CVE-2026-59822 CVSS 8.8 — LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or …
LINK COPIED TO CLIPBOARD