LiteLLM versions prior to 1.83.0 contain a privilege escalation vulnerability in the /config/update endpoint, which lacks proper admin role authorization. Authenticated users can exploit this to modify proxy settings, execute arbitrary Python code remotely, read arbitrary server files, and take over privileged accounts by overwriting environment variables. The issue is fixed in version 1.83.0 by requiring the proxy_admin role for this endpoint. No configuration-level workaround exists; restricting API key distribution is recommended until patched.