Vulnerability intelligence

CVE-2026-40217

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.

CVSS Score

8.8

High

EPSS — Exploit Probability

3.4%

Riskier than 89% of all CVEs · checked 2026-10-24

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

1 article across 1 outlet · first covered Sep 10, 2026 · latest Sep 10, 2026

Associated threat actors