Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-40217

Fixed in a distro release EPSS 16%CVSS 8.8

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.

Published 2026-04-10 · CVE record · OSV

Products: berriai litellm, Red Hat Ansible Automation Platform 2.6, Red Hat OpenShift AI 3.3, Red Hat Lightspeed Core, Red Hat OpenShift AI (RHOAI)

Fixed upstream

EcosystemPackageFixed in
PyPIlitellm1.83.10

Distro releases

ReleasePackageFixed in
Chainguardairflow-33.2.2-r7
Chainguardlitellm0
Chainguardlitellm-compat0
Wolfiairflow-33.2.2-r7