CVE-2026-40217
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.
CVSS
8.8
Alta
EPSS
17.0%
p97
KEV
—
Exploit Today
29
0-100
Publicado: 10 de abr. de 2026 · Última mod.: 26 de out. de 2026 · CWE-420 · CWE-94
3.4%EPSS · 30 dias17.0%
2026-10-112026-11-08
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.
- www.x41-dsec.dehttps://www.x41-dsec.de/lab/advisories/x41-2026-001-litellm/
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:24866
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:30056
- access.redhat.comhttps://access.redhat.com/security/cve/CVE-2026-40217
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=2457301
- security.access.redhat.comhttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40217.json
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-11525210.0 CRÍ—
———The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks before saving its settings and writing one of them, unmodified, into a standalone PHP file that it then serves, allowing unauthenticated users to execute arbitrary PHP code on the server.6hCVE-2026-1245886.3 MÉD—
———A security flaw has been discovered in huggingface finetrainers 0.1.0/0.2.0. The impacted element is the function resolve_component_cls of the file finetrainers/utils/model.py of the component Model Index Handler. Performing a manipulation of the argument Library results in code injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.10hCVE-2026-1245702.4 BAI—
———A vulnerability was detected in SourceCodester Online Leave Management System 1.0. Affected is an unknown function of the file app/classes/Master.php of the component Employee Avatar Upload Extension. Performing a manipulation of the argument employee avatar filename results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used.14hCVE-2026-1245064.3 MÉD—
———A vulnerability has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This vulnerability affects the function Model.getDomain of the file WEB-INF/tags/hourlyReport.tag of the component Report Handler. The manipulation of the argument domain leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.19hCVE-2026-1244994.7 MÉD—
———A vulnerability was identified in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This affects the function write_translations of the file application/controllers/ToolController.class.php of the component Translation Tool. The manipulation of the argument lang leads to code injection. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.20hCVE-2026-1244983.5 BAI—
———A vulnerability was determined in Convene Azeus Convene Board Management Portal 7.0.2.7_3 p72. The impacted element is an unknown function of the file /jsp/ge/dummy_launcher.jsp. Executing a manipulation of the argument REDIRECT_URL can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.21h