AI agent vulnerability · LiteLLM

GHSA-3926-2jvf-fg29: Duplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrail

highCVSS 3.1 8.8

This advisory was withdrawn on May 11, 2026. The publisher no longer considers it a valid vulnerability.

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wxxx-gvqv-xp7p. This link is maintained to preserve external references. Original Description LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/testcustomcode URI.

Published Apr 10, 2026 · Updated May 11, 2026

Affected packages

litellm

Ecosystem: PyPI
Affected: >= 1.81.8, < 1.83.10
Fixed in: 1.83.10
Check: pip show litellm

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-wxxx-gvqv-xp7p. This link is maintained to preserve external references.

Original Description

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More LiteLLM vulnerabilities

All LiteLLM entries