8.8High
CVE-2026-40217
Description
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| ansible automation platform | 2.6 | — | |
| BerriAI | LiteLLM | bb0639701796218a3447160e55c0f1097446e4e6085df7dfd39f476d4143743f | |
| litellm | litellm | ≤ 2026-04-08 | |
| openshift ai | 3.3 | — | |
| Red Hat | Lightspeed Core | all versions | |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | all versions | |
| Red Hat | Red Hat OpenShift AI 3.3 | all versions | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — |
References and patches
- https://www.x41-dsec.de/lab/advisories/x41-2026-001-litellm/ ExploitMitigationThird Party Advisory
- https://access.redhat.com/errata/RHSA-2026:24866
- https://access.redhat.com/errata/RHSA-2026:30056
- https://access.redhat.com/security/cve/CVE-2026-40217
- https://bugzilla.redhat.com/show_bug.cgi?id=2457301
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40217.json
CPE matches (NVD) (1)
cpe:2.3:a:litellm:litellm:*:*:*:*:*:*:*:*≤ 2026-04-08