Red Hat Security Advisory

RHSA-2026:30056

RHOAI 3.3.4 - Red Hat OpenShift AI

Released 2026-06-25 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-30582 CVE-2026-42271 · GHSA-v4p8-mg3p-g94g

CRITICAL 97KEV

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.91445 Published 2026-05-08 Fixed in 1.83.7 CWE-77

TI-2026-29027 CVE-2026-40217 · GHSA-wxxx-gvqv-xp7p

HIGH 73

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.1702 Published 2026-04-10 Partial fix · 1.83.10 CWE-420

TI-2026-27232 CVE-2026-35029 · GHSA-53mr-6c8q-9789

HIGH 67

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.38613 Published 2026-04-06 Partial fix · 1.83.0 CWE-863

TI-2026-27233 CVE-2026-35030 · GHSA-jjhc-v7c2-5hh6

MEDIUM 49

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.

CVSS 4.0CRITICAL 9.4 Network No auth No interaction EPSS 0.00636 Published 2026-04-06 Partial fix · 1.83.0 CWE-287