REDHAT-BUG-2480634: High severity LiteLLM vulnerability
LiteLLM prior to 1.83.10 allows a user to modify their own userrole via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, it does not restrict which fields may be changed. A user who can reach this endpoint can set their role to proxyadmin, gaining full administrative access to LiteLLM including all users, teams, keys, models, and prompt history. Users with the orgadmin role have legitimate access to this endpoint and can exploit this vulnerability without chaining any additional flaw.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
LiteLLMto a version that resolves this vulnerability.Fixed in 1.83.10 - Configuration
Ensure the /user/update endpoint does not allow users to modify the user_role field (only allow permitted self-account fields).
LiteLLM /user/update endpoint user_role modification = disallow changes to user_role - Operational
Review for any accounts whose user_role was modified to proxy_admin and revoke/regenerate any affected access as needed after patching.
Event History
Frequently Asked Questions
Which users can exploit this issue without needing another vulnerability?
Users with the org_admin role have legitimate access to the /user/update endpoint and can exploit the issue directly. They can change their own user_role to proxy_admin.
What access does an attacker gain after changing their role?
The attacker gains full LiteLLM administrative access as proxy_admin, including access to users, teams, keys, models, and prompt history.
What versions are affected?
LiteLLM versions prior to 1.83.10 are affected.