CVE-2026-40217

HIGH8.8Published on April 10, 2026

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.

CVSS score8.8 / 10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-420, CWE-94

Vendorslitellm

Affected products

Vendors	Prodotto	Versioni
litellm	litellm	<= 2026-04-08

Agenti malevoli infettano i Workspace di ChatGPT: l'ombra di AgentForger

Vulnerabilities

AgentForger: When a Phishing Link Is Enough to Create a Persistent AI Insider

A CSRF flaw in ChatGPT Workspace, AgentForger, allowed a phishing link to create a persistent AI insider, risking data theft and remote command execution.

Jul 25, 20264 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

AgentForger: When a Phishing Link Is Enough to Create a Persistent AI Insider