CVE-2026-47102— LiteLLM < 1.83.10 Privilege Escalation via User Update

LiteLLM < 1.83.10 Privilege Escalation via User Update

LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, it does not restrict which fields may be changed. A user who can reach this endpoint can set their role to proxy_admin, gaining full administrative access to LiteLLM including all users, teams, keys, models, and prompt history. Users with the org_admin role have legitimate access to this endpoint and can exploit this vulnerability without chaining any additional flaw.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

授权机制不正确

LiteLLM 安全漏洞

LiteLLM是Berri AI开源的一个应用程序。可以使用 OpenAI 格式调用所有 LLM API。 LiteLLM 1.83.10之前版本存在安全漏洞，该漏洞源于/user/update端点未限制可修改字段，可能导致用户修改自身user_role为proxy_admin，获得完全管理访问权限，包括所有用户、团队、密钥、模型和提示历史。

N/A

N/A