Log in Start free

Vulnerability · Published May 21, 2026 · Assigned by VulnCheck

CVE-2026-47102LiteLLM < 1.83.10 Privilege Escalation via User Update

High 8.8

In plain English

A high-severity incorrect authorization in litellm from BerriAI. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.7%top 48.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Public PoC

Official description

LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, it does not restrict which fields may be changed. A user who can reach this endpoint can set their role to proxy_admin, gaining full administrative access to LiteLLM including all users, teams, keys, models, and prompt history. Users with the org_admin role have legitimate access to this endpoint and can exploit this vulnerability without chaining any additional flaw.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
PyPIlitellm1.83.10GHSA-wpfp-gwwc-vwq6
PyPIlitellm1.83.10PYSEC-2026-2600

Affected products (as reported)

VendorProductVersions
BerriAI litellm 0 – before 1.83.10

Weakness: CWE-863, CWE-915 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References