CVE-2026-40217

CVSS 3.1: 8.8 high
EPSS: 16%p97
Published: Apr 10, 2026 · Apr 10, 2026
Modified: Oct 26, 2026

Analyze CVE-2026-40217 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.

Vendors: litellm

Products: litellm

Weakness: CWE-420, CWE-94

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (15.5%)

In the news

3 stories

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

The Hacker NewsJul 27, 06:30 UTC · Jul 27, 2026Phishing & fraudCVE-2024-6587 CVE-2026-40217 CVE-2026-350293 · 1 read

Nearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin Key

Wiz found 294 of 3,074 internet-facing LiteLLM gateways accepted the documented default admin key sk-1234, exposing provider API keys and cloud IAM credentials.

The Hacker NewsSep 10, 07:12 UTC · Sep 10, 2026VulnerabilityExploitedCVE-2026-59821 CVE-2026-59822 CVE-2026-42271+22 · 1 read

LiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway Servers

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2026AI safety & securityExploitedCVE-2026-47101 CVE-2026-47102 CVE-2026-40217+12