CVE-2026-47101— LiteLLM 安全漏洞

LiteLLM < 1.83.14 Privilege Escalation via API Key Generation

LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit. When generating a key, the allowed_routes field is stored without verifying that the specified routes fall within the user's own permissions. A key created with access to admin-only routes can then be used to reach those routes successfully, bypassing the role-based access controls that would otherwise block the request, enabling full privilege escalation from internal_user to proxy_admin.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

授权机制不正确

LiteLLM 安全漏洞

LiteLLM是Berri AI开源的一个应用程序。可以使用 OpenAI 格式调用所有 LLM API。 LiteLLM 1.83.14之前版本存在安全漏洞，该漏洞源于创建API密钥时未验证allowed_routes字段是否在用户自身权限内，可能导致认证的内部用户创建具有其角色不允许路由访问权限的密钥，从而绕过基于角色的访问控制，实现从internal_user到proxy_admin的完全权限提升。

N/A

N/A