CVE-2026-47102

[CVE catalog]

Severity

High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Published

May 21, 2026, 8:34:37 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.65% · Oct 25, 2026

A flaw was found in LiteLLM. A user with access to the `/user/update` endpoint can exploit a privilege escalation vulnerability. By modifying their own `user_role` to `proxy_admin`, an attacker can gain full administrative access to LiteLLM, including control over all users, teams, keys, models, and prompt history. litellm: LiteLLM: Privilege escalation through user role modification This vulnerability is rated Important because an authenticated LiteLLM proxy user may be able to modify their own user_role via the /user/update endpoint and escalate to proxy_admin, gaining full administrative access to the LiteLLM instance. Exploitation requires network access to a LiteLLM proxy deployment and valid credentials for a user who can reach the user management endpoints. Users with the org_admin role can exploit this directly. Products that bundle litellm without exposing the proxy user-management API have reduced exposure. Affected packages should be updated to litellm 1.83.10 or later when fixes are released. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.