LiteLLM versions before 1.83.10 contain an authorization flaw in the /user/update API endpoint. While the endpoint correctly limits users to updating only their own account, it fails to restrict which fields can be modified. This allows a user with org_admin privileges to escalate their role to proxy_admin by changing the user_role field, thereby gaining full administrative access to the system. The vulnerability does not require chaining with other flaws to be exploited. No official fix or patch has been disclosed at this time.

Successful exploitation results in privilege escalation from org_admin to proxy_admin, granting an attacker full administrative access to LiteLLM. This includes control over all users, teams, keys, models, and prompt history, potentially leading to complete compromise of the affected system's confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the /user/update endpoint to trusted users only, and monitor for unauthorized role changes. Avoid granting org_admin privileges broadly as these users can exploit this vulnerability without additional flaws.