CVE-2026-40217

CVE-2026-40217 is a critical vulnerability in LiteLLM versions through April 8, 2026 that enables remote code execution through bytecode rewriting mechanisms at the /guardrails/test_custom_code endpoint. The vulnerability has a CVSS score of 8.8 (HIGH), indicating significant risk to affected systems and their data. The attack requires low complexity and low privilege access but requires network connectivity and user authentication, making it accessible to authenticated threat actors. Exploitation would result in complete compromise of confidentiality, integrity, and availability. Currently, this vulnerability is not listed on the CISA Known Exploited Vulnerabilities catalog and is not actively being exploited in the wild, though the FAUCET risk score of 52.0 suggests moderate concern within the threat landscape.