High
github
·
GHSA-3926-2jvf-fg29
Duplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrail
Published Apr 10, 2026
CVSS 8.8
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-wxxx-gvqv-xp7p. This link is maintained to preserve external references.
Original Description
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.
Affected AI Products
litellm