WID-SEC-W-2026-1408

DeutschShown in its original language — a full translation is planned for a future version.

LiteLLM: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten

view advisory published 2026-05-06

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in LiteLLM ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-40217US	—	3.40% (89th)	Exploit	2026-04-10
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.

references

External citations — patches, advisories, analysis.

Red Hat Security Advisory RHSA-2026:24866 vom 2026-06-09external
Red Hat Security Advisory RHSA-2026:30056 vom 2026-06-25external
GitHub Security Advisory GHSA-wxxx-gvqv-xp7p vom 2026-05-06external
WID-SEC-W-2026-1408 - CSAF Versionself
WID-SEC-2026-1408 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan