https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 07 Sep 2026 09:00:13 +0000 https://vulnerability.circl.lu/sighting/de1e78b1-e0c7-43fa-aec2-76fc21219d76/export {"uuid": "de1e78b1-e0c7-43fa-aec2-76fc21219d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "seen", "source": "https://bsky.app/profile/sentinelanalysis.bsky.social/post/3mu25uzaqvu2e", "content": "Here's the uncomfortable part: while the EU writes rules, the middleware running your agents is the new attack surface. LiteLLM CVE-2026-40217 and CVE-2026-49468 are being exploited right now.", "creation_timestamp": "2026-08-27T05:53:53.947837Z"} {"uuid": "de1e78b1-e0c7-43fa-aec2-76fc21219d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "seen", "source": "https://bsky.app/profile/sentinelanalysis.bsky.social/post/3mu25uzaqvu2e", "content": "Here's the uncomfortable part: while the EU writes rules, the middleware running your agents is the new attack surface. LiteLLM CVE-2026-40217 and CVE-2026-49468 are being exploited right now.", "creation_timestamp": "2026-08-27T05:53:53.947837Z"} https://vulnerability.circl.lu/sighting/de1e78b1-e0c7-43fa-aec2-76fc21219d76/export Thu, 27 Aug 2026 05:53:53 +0000 https://vulnerability.circl.lu/sighting/166e90f8-e0fa-4f3c-808e-c37aed490e08/export {"uuid": "166e90f8-e0fa-4f3c-808e-c37aed490e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-40217.yaml", "content": "", "creation_timestamp": "2026-08-26T00:00:10.519919Z"} {"uuid": "166e90f8-e0fa-4f3c-808e-c37aed490e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-40217.yaml", "content": "", "creation_timestamp": "2026-08-26T00:00:10.519919Z"} https://vulnerability.circl.lu/sighting/166e90f8-e0fa-4f3c-808e-c37aed490e08/export Wed, 26 Aug 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/1f95974c-6861-4478-ae2f-119454172cd1/export {"uuid": "1f95974c-6861-4478-ae2f-119454172cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-40217.yaml", "content": "", "creation_timestamp": "2026-08-25T00:00:11.482056Z"} {"uuid": "1f95974c-6861-4478-ae2f-119454172cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-40217.yaml", "content": "", "creation_timestamp": "2026-08-25T00:00:11.482056Z"} https://vulnerability.circl.lu/sighting/1f95974c-6861-4478-ae2f-119454172cd1/export Tue, 25 Aug 2026 00:00:11 +0000 https://vulnerability.circl.lu/sighting/f4d6746a-0557-4caa-84a0-7c398d6cc9af/export {"uuid": "f4d6746a-0557-4caa-84a0-7c398d6cc9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-40217.yaml", "content": "", "creation_timestamp": "2026-08-24T00:00:02.637799Z"} {"uuid": "f4d6746a-0557-4caa-84a0-7c398d6cc9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-40217.yaml", "content": "", "creation_timestamp": "2026-08-24T00:00:02.637799Z"} https://vulnerability.circl.lu/sighting/f4d6746a-0557-4caa-84a0-7c398d6cc9af/export Mon, 24 Aug 2026 00:00:02 +0000 https://vulnerability.circl.lu/sighting/087ad2ea-c1f2-42c7-bb3c-d3f93543e15f/export {"uuid": "087ad2ea-c1f2-42c7-bb3c-d3f93543e15f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-40217.yaml", "content": "", "creation_timestamp": "2026-08-23T00:00:03.975076Z"} {"uuid": "087ad2ea-c1f2-42c7-bb3c-d3f93543e15f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-40217.yaml", "content": "", "creation_timestamp": "2026-08-23T00:00:03.975076Z"} https://vulnerability.circl.lu/sighting/087ad2ea-c1f2-42c7-bb3c-d3f93543e15f/export Sun, 23 Aug 2026 00:00:03 +0000 https://vulnerability.circl.lu/sighting/2caf64b5-1a8d-46ac-8493-cff2a2fd9d86/export {"uuid": "2caf64b5-1a8d-46ac-8493-cff2a2fd9d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-40217.yaml", "content": "", "creation_timestamp": "2026-08-22T15:00:06.125311Z"} {"uuid": "2caf64b5-1a8d-46ac-8493-cff2a2fd9d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-40217.yaml", "content": "", "creation_timestamp": "2026-08-22T15:00:06.125311Z"} https://vulnerability.circl.lu/sighting/2caf64b5-1a8d-46ac-8493-cff2a2fd9d86/export Sat, 22 Aug 2026 15:00:06 +0000 https://vulnerability.circl.lu/sighting/3dc736f9-f6d7-4e60-8404-07f4b4167c34/export {"uuid": "3dc736f9-f6d7-4e60-8404-07f4b4167c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40211", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4lztjlwy2f", "content": "CVE-2026-40211 - Denial of service via crafted DoH3 queries\nCVE ID : CVE-2026-40211\n \n Published : June 25, 2026, 12:23 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from b...", "creation_timestamp": "2026-06-25T14:06:29.386056Z"} {"uuid": "3dc736f9-f6d7-4e60-8404-07f4b4167c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40211", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4lztjlwy2f", "content": "CVE-2026-40211 - Denial of service via crafted DoH3 queries\nCVE ID : CVE-2026-40211\n \n Published : June 25, 2026, 12:23 p.m. | 1\u00a0hour, 20\u00a0minutes ago\n \n Description : An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from b...", "creation_timestamp": "2026-06-25T14:06:29.386056Z"} https://vulnerability.circl.lu/sighting/3dc736f9-f6d7-4e60-8404-07f4b4167c34/export Thu, 25 Jun 2026 14:06:29 +0000 https://vulnerability.circl.lu/sighting/ed05a027-9b99-4bfa-9e6c-7271ff174783/export {"uuid": "ed05a027-9b99-4bfa-9e6c-7271ff174783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40210", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4lqutkkc2o", "content": "CVE-2026-40210 - Out-of-bounds read in SetMacAddrAction\nCVE ID : CVE-2026-40210\n \n Published : June 25, 2026, 12:23 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory be...", "creation_timestamp": "2026-06-25T14:01:28.929201Z"} {"uuid": "ed05a027-9b99-4bfa-9e6c-7271ff174783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40210", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4lqutkkc2o", "content": "CVE-2026-40210 - Out-of-bounds read in SetMacAddrAction\nCVE ID : CVE-2026-40210\n \n Published : June 25, 2026, 12:23 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory be...", "creation_timestamp": "2026-06-25T14:01:28.929201Z"} https://vulnerability.circl.lu/sighting/ed05a027-9b99-4bfa-9e6c-7271ff174783/export Thu, 25 Jun 2026 14:01:28 +0000 https://vulnerability.circl.lu/sighting/93e96dba-3704-4f6c-8592-c285c6fc101c/export {"uuid": "93e96dba-3704-4f6c-8592-c285c6fc101c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "published-proof-of-concept", "source": "Telegram/SM41ZgDjE5GCx8_K5BndOjKQZfdnq7khstyXQtIQ9aWd83s", "content": "", "creation_timestamp": "2026-05-19T21:00:04.000000Z"} {"uuid": "93e96dba-3704-4f6c-8592-c285c6fc101c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "published-proof-of-concept", "source": "Telegram/SM41ZgDjE5GCx8_K5BndOjKQZfdnq7khstyXQtIQ9aWd83s", "content": "", "creation_timestamp": "2026-05-19T21:00:04.000000Z"} https://vulnerability.circl.lu/sighting/93e96dba-3704-4f6c-8592-c285c6fc101c/export Tue, 19 May 2026 21:00:04 +0000 https://vulnerability.circl.lu/sighting/720c1245-8d16-42c2-a2c5-4b4d8ebc0657/export {"uuid": "720c1245-8d16-42c2-a2c5-4b4d8ebc0657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "seen", "source": "https://gist.github.com/alon710/37ecce29751bae48629dbc52c1e489d5", "content": "# CVE-2026-40217: CVE-2026-40217: Remote Code Execution via Sandbox Escape in LiteLLM\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-05-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-40217\n\n## Summary\nLiteLLM, an open-source LLM proxy, contains a critical sandbox escape vulnerability in its guardrail testing endpoint. An authenticated attacker can bypass regex-based source-code filtering by leveraging Python object hierarchy traversal and runtime bytecode manipulation, leading to arbitrary code execution as the process owner.\n\n## TL;DR\nAn authenticated RCE vulnerability exists in LiteLLM's `/guardrails/test_custom_code` endpoint. The custom Python sandbox relies on flawed regex filtering, allowing attackers to rewrite function bytecode and access restricted built-ins to execute system commands.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 8.8\n- **EPSS Score**: 0.0024\n- **Impact**: Remote Code Execution\n- **Exploit Status**: Proof of Concept (PoC)\n\n## Affected Systems\n\n- LiteLLM Proxy\n- LiteLLM Docker Containers\n- **LiteLLM**: <= 2026-04-08 (Fixed in: `v1.83.10-stable`)\n\n## Mitigation\n\n- Software Update\n- Network Segmentation\n- Privilege Reduction\n- URI Blocking\n\n**Remediation Steps:**\n1. Identify all running instances of the LiteLLM proxy within the infrastructure.\n2. Pull the updated Docker image for LiteLLM version v1.83.10-stable or higher.\n3. Redeploy the LiteLLM containers specifying an unprivileged user via the Docker `--user` flag.\n4. Configure the upstream reverse proxy (e.g., Nginx or Traefik) to block POST requests targeting `/guardrails/test_custom_code`.\n5. Verify that the management port (default 4000) is unreachable from the public internet.\n\n## References\n\n- [X41 D-Sec Security Advisory](https://www.x41-dsec.de/lab/advisories/x41-2026-001-litellm/)\n- [SentinelOne Vulnerability Database](https://www.sentinelone.com/vulnerability-database/cve-2026-40217/)\n- [LiteLLM Release v1.83.10-stable](https://github.com/BerriAI/litellm/releases/tag/v1.83.10-stable)\n- [CVE Record (CVE.org)](https://www.cve.org/CVERecord?id=CVE-2026-40217)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-40217) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-05-11T17:10:29.000000Z"} {"uuid": "720c1245-8d16-42c2-a2c5-4b4d8ebc0657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-40217", "type": "seen", "source": "https://gist.github.com/alon710/37ecce29751bae48629dbc52c1e489d5", "content": "# CVE-2026-40217: CVE-2026-40217: Remote Code Execution via Sandbox Escape in LiteLLM\n\n> **CVSS Score:** 8.8\n> **Published:** 2026-05-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-40217\n\n## Summary\nLiteLLM, an open-source LLM proxy, contains a critical sandbox escape vulnerability in its guardrail testing endpoint. An authenticated attacker can bypass regex-based source-code filtering by leveraging Python object hierarchy traversal and runtime bytecode manipulation, leading to arbitrary code execution as the process owner.\n\n## TL;DR\nAn authenticated RCE vulnerability exists in LiteLLM's `/guardrails/test_custom_code` endpoint. The custom Python sandbox relies on flawed regex filtering, allowing attackers to rewrite function bytecode and access restricted built-ins to execute system commands.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 8.8\n- **EPSS Score**: 0.0024\n- **Impact**: Remote Code Execution\n- **Exploit Status**: Proof of Concept (PoC)\n\n## Affected Systems\n\n- LiteLLM Proxy\n- LiteLLM Docker Containers\n- **LiteLLM**: <= 2026-04-08 (Fixed in: `v1.83.10-stable`)\n\n## Mitigation\n\n- Software Update\n- Network Segmentation\n- Privilege Reduction\n- URI Blocking\n\n**Remediation Steps:**\n1. Identify all running instances of the LiteLLM proxy within the infrastructure.\n2. Pull the updated Docker image for LiteLLM version v1.83.10-stable or higher.\n3. Redeploy the LiteLLM containers specifying an unprivileged user via the Docker `--user` flag.\n4. Configure the upstream reverse proxy (e.g., Nginx or Traefik) to block POST requests targeting `/guardrails/test_custom_code`.\n5. Verify that the management port (default 4000) is unreachable from the public internet.\n\n## References\n\n- [X41 D-Sec Security Advisory](https://www.x41-dsec.de/lab/advisories/x41-2026-001-litellm/)\n- [SentinelOne Vulnerability Database](https://www.sentinelone.com/vulnerability-database/cve-2026-40217/)\n- [LiteLLM Release v1.83.10-stable](https://github.com/BerriAI/litellm/releases/tag/v1.83.10-stable)\n- [CVE Record (CVE.org)](https://www.cve.org/CVERecord?id=CVE-2026-40217)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-40217) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-05-11T17:10:29.000000Z"} https://vulnerability.circl.lu/sighting/720c1245-8d16-42c2-a2c5-4b4d8ebc0657/export Mon, 11 May 2026 17:10:29 +0000