SOURCE-LINKED INTELLIGENCE
GHSA-72m8-9m7m-h278: LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
### Impact LiteLLM's Custom Code Guardrails production create/update paths did not apply the same sandboxing and validation used by the test endpoint. A privileged user with access to create or update guardrails could submit custom Python code that executed in the LiteLLM proxy environment. In deployments without a configured master key, callers could be treated as proxy administrators, making this reachable without intended administrative authorization. This could allow arbitrary code execution in the LiteLLM proxy container and exposure of secrets available to the process. ### Patches The is
Read original source ↗ Open in workspace
- recordType
- vulnerability
- status
- active
- evidenceStatus
- reported
- region
- Global
Evidence & attribution
- OSV AI package advisories · 2026-07-22T22:38:55.000Z
- OSV AI package advisories · 2026-07-23T11:41:48.799Z
First collected: 2026-09-20T23:41:51.992Z. This is not the publication date.