Description (CNA)
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| BerriAI / LiteLLM | affected bb0639701796218a3447160e55c0f1097446e4e6085df7dfd39f476d4143743f |
CWE
CWE-420
References
ADP enrichment
No English description supplied.
No references supplied.
A flaw was found in LiteLLM. A remote attacker can exploit this flaw by performing bytecode rewriting at the `/guardrails/test_custom_code` URI. This could lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system.