CVE-2026-47102: LiteLLM < 1.83.10 Privilege Escalation via User Update
LiteLLM prior to 1.83.10 allows a user to modify their own userrole via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, it does not restrict which fields may be changed. A user who can reach this endpoint can set their role to proxyadmin, gaining full administrative access to LiteLLM including all users, teams, keys, models, and prompt history. Users with the orgadmin role have legitimate access to this endpoint and can exploit this vulnerability without chaining any additional flaw.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
LiteLLMto a version that resolves this vulnerability.Fixed in 1.83.10 - Configuration
Modify LiteLLM so that /user/update does not allow changing user_role (e.g., proxy_admin or org_admin) through the endpoint. Ensure only permitted fields for the authenticated user can be updated.
LiteLLM (/user/update) endpoint user_role field update restriction = Restrict updates to immutable/allowed fields only; do not allow user_role to be modified via /user/update
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47102?
CVE-2026-47102 has a severity rating of high, with a CVSS score of 8.7.
How do I fix CVE-2026-47102?
To fix CVE-2026-47102, upgrade LiteLLM to version 1.83.10 or later.
What type of vulnerability is CVE-2026-47102?
CVE-2026-47102 is a privilege escalation vulnerability that allows unauthorized role changes via the user update endpoint.
Who is affected by CVE-2026-47102?
Users of LiteLLM versions prior to 1.83.10 are affected by CVE-2026-47102.
What is the potential impact of exploiting CVE-2026-47102?
Exploiting CVE-2026-47102 may allow an attacker to escalate their privileges to proxy_admin and gain unauthorized access.