CVE-2026-47101High· 8.8▾ MidnightPoC availableLiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit. When generating a key, the allowed_routes field is stored without verifying that the specified route…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 48.4 · likelihood 0.2 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Jul 4.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.7%
2 GitHub repos
0.7% → 1.2%
LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit. When generating a key, the allowed_routes field is stored without verifying that the specified routes fall within the user's own permissions. A key created with access to admin-only routes can then be used to reach those routes successfully, bypassing the role-based access controls that would otherwise block the request, enabling full privilege escalation from internal_user to proxy_admin.
litellm < 1.83.14Upgrade past the affected range:
litellm 1.83.14Affected packages:
litellm < 1.83.14Patched in:
litellm 1.83.14Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-47102High· 8.8LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint
CVE-2026-37004Critical· 9.8LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint
CVE-2026-42203HighLiteLLM: Server-Side Template Injection in /prompts/test endpoint
CVE-2026-40217High· 8.8LiteLLM has a sandbox escape in custom-code guardrail
CVE-2026-35029HighLiteLLM: Privilege escalation via unrestricted proxy configuration endpoint
CVE-2026-59822High· 8.2LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format