CVE-2026-40217 is a vulnerability in BerriAI LiteLLM that permits remote code execution through bytecode rewriting at a specific URI endpoint (/guardrails/test_custom_code). This issue stems from an unprotected alternate channel (CWE-420) and improper control over code generation (CWE-94). The CVSS 3.1 score is 8.8, indicating high severity with network attack vector, low attack complexity, requiring low privileges and no user interaction, and impacting confidentiality, integrity, and availability. Although no direct patch or remediation level is provided in the input, Red Hat has published advisories referencing this CVE, suggesting that fixes or mitigations may be available through their errata. The vulnerability affects LiteLLM versions up to the date 2026-04-08, but exact version identifiers are not specified.

Successful exploitation of this vulnerability allows remote attackers to execute arbitrary code on the affected system, potentially leading to full compromise of confidentiality, integrity, and availability of the system running LiteLLM. The vulnerability is exploitable over the network with low complexity and requires only low privileges, increasing the risk of exploitation. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Red Hat has published advisories referencing CVE-2026-40217, indicating that updates or fixes may be available through Red Hat errata. Users should monitor the referenced Red Hat advisories (https://access.redhat.com/security/cve/CVE-2026-40217, https://access.redhat.com/errata/RHSA-2026:24866, https://access.redhat.com/errata/RHSA-2026:30056) for official patches or updates. Until a patch is applied, restrict access to the vulnerable URI endpoint (/guardrails/test_custom_code) if possible to mitigate risk.