Описание
Duplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrail
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-wxxx-gvqv-xp7p. This link is maintained to preserve external references.
Original Description
LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.
Пакеты
Наименование
litellm
pip
Затронутые версииВерсия исправления
>= 1.81.8, < 1.83.10
1.83.10
8.8 High
CVSS3
Дефекты
CWE-420
8.8 High
CVSS3
Дефекты
CWE-420