CVE-2026-47102: Incorrect Authorization in BerriAI litellm
LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, it does not restrict which fields may be changed. A user who can reach this endpoint can set their role to proxy_admin, gaining full administrative access to LiteLLM including all users, teams, keys, models, and prompt history. Users with the org_admin role have legitimate access to this endpoint and can exploit this vulnerability without chaining any additional flaw.
AI Analysis
Technical Summary
CVE-2026-47102 is an incorrect authorization vulnerability in BerriAI's LiteLLM product before version 1.83.10. The /user/update endpoint restricts users to modifying only their own accounts but fails to restrict which fields can be changed. This allows a user with access to this endpoint, including those with org_admin role, to escalate privileges by setting their user_role to proxy_admin. The proxy_admin role provides full administrative access to all users, teams, keys, models, and prompt history within LiteLLM. The vulnerability is tracked under CWE-915 (Improper Authorization).
Potential Impact
Exploitation of this vulnerability allows an attacker with legitimate access to the /user/update endpoint to escalate their privileges to proxy_admin, gaining full administrative control over the LiteLLM environment. This includes access to all users, teams, keys, models, and prompt history, potentially leading to complete compromise of the system's confidentiality, integrity, and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch is indicated in the provided data. Until a patch is available, restrict access to the /user/update endpoint to trusted users only and monitor for unauthorized privilege escalations. Follow updates from the vendor and Red Hat advisory for official remediation steps.
CVE-2026-47102: Incorrect Authorization in BerriAI litellm
Description
LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, it does not restrict which fields may be changed. A user who can reach this endpoint can set their role to proxy_admin, gaining full administrative access to LiteLLM including all users, teams, keys, models, and prompt history. Users with the org_admin role have legitimate access to this endpoint and can exploit this vulnerability without chaining any additional flaw.
CVSS v4.0
Score 8.7high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-47102 is an incorrect authorization vulnerability in BerriAI's LiteLLM product before version 1.83.10. The /user/update endpoint restricts users to modifying only their own accounts but fails to restrict which fields can be changed. This allows a user with access to this endpoint, including those with org_admin role, to escalate privileges by setting their user_role to proxy_admin. The proxy_admin role provides full administrative access to all users, teams, keys, models, and prompt history within LiteLLM. The vulnerability is tracked under CWE-915 (Improper Authorization).
Potential Impact
Exploitation of this vulnerability allows an attacker with legitimate access to the /user/update endpoint to escalate their privileges to proxy_admin, gaining full administrative control over the LiteLLM environment. This includes access to all users, teams, keys, models, and prompt history, potentially leading to complete compromise of the system's confidentiality, integrity, and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch is indicated in the provided data. Until a patch is available, restrict access to the /user/update endpoint to trusted users only and monitor for unauthorized privilege escalations. Follow updates from the vendor and Red Hat advisory for official remediation steps.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-05-18T19:22:26.748Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-47102","vendor":"Red Hat"}]
Threat ID: 6a105dd5e1370fbb48fef179
Added to database: 05/22/2026, 13:44:53 UTC
Last enriched: 07/30/2026, 00:38:47 UTC
Last updated: 07/31/2026, 19:30:18 UTC
Views: 161
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.