CVE-2026-40217highobserved exploitationCWE-420 CWE-94

CVE-2026-40217

63Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.

ssvc Actcvss 8.8epss 6.5%

from disclosure to weapon39 days

Published on NVDApr 10

1st PoC+39d

VulnCheck+111d

exploitation probability

6.5%top 7% of all CVEs

observed exploitation

yesVulnCheck

3 public exploit(s)

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

public PoCs found — 3

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References