Netskope Threat Labs

SERVER-WEBAPP LiteLLM Custom Code Guardrail Sandbox Escape RCE Attempt (CVE-2026-40217)

IPS-NPA

1 SID: 302013

Detects an attempt to exploit CVE-2026-40217, a remote code execution flaw that can run code on the server in LiteLLM Custom Code Guardrail Sandbox Escape.