Vulnerability · Published Apr 10, 2026 · Assigned by mitre
CVE-2026-40217
High 8.8
In plain English
A high-severity code injection in LiteLLM from BerriAI. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 17.0% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)17.0%top 2.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling2Nuclei, Public PoC
Official description
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | litellm | 1.83.10 | GHSA-wxxx-gvqv-xp7p |
| PyPI | litellm | 1.83.10 | PYSEC-2026-2601 |
Affected products (as reported)
Weakness: CWE-420, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://www.x41-dsec.de/lab/advisories/x41-2026-001-litellm/
- https://access.redhat.com/security/cve/CVE-2026-40217 vdb-entry, x_refsource_REDHAT
- RHBZ#2457301 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40217.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:24866 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30056 vendor-advisory, x_refsource_REDHAT