PT-2026-42538 · Litellm · Litellm

13Ph03Nix · CVE-2026-47101 · Published 2026-02-19 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LiteLLM versions prior to 1.83.14

Description An authenticated internal user can create API keys with access to routes not permitted by their role. This occurs because the allowed routes field is stored during key generation without verifying if the specified routes align with the user's permissions. By creating a key with access to admin-only routes, a user can bypass role-based access controls (RBAC)—a mechanism that restricts system access to authorized users—resulting in full privilege escalation from internal user to proxy admin.

Recommendations Update to version 1.83.14 or later.

Exploit

Fix

LPE

Incorrect Authorization

IDOR

Weakness Enumeration

CWE-863

CWE-639

Related Identifiers

BDU:2026-08670

CVE-2026-47101

ECHO-DCDA-3B71-8055

GHSA-QRC4-49GV-MV9M

PYSEC-2026-2598

Affected Products

Litellm

References · 31

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47101.json · Exploit
• 🔥 https://github.com/learner202649/CVE-2026-47101-PoC · Exploit
• 🔥 https://obsidiansecurity.com/blog/litellm-privilege-escalation-rce · Exploit
• 🔥 https://gist.github.com/13ph03nix/9ec616e1fdc77b3673509c60206e827f · Exploit
• 🔥 https://huntr.com/bounties/8e75edfb-ff05-4e63-bfca-2d93d03fb3b9 · Exploit
• https://github.com/BerriAI/litellm/commit/5190bd07eb23a037745d86328096f54378f1614a · Patch
• https://github.com/BerriAI/litellm/commit/2220f3076ac89bd2a2e3439acf57dcfbec2434c9 · Patch
• https://github.com/BerriAI/litellm/commit/d910a95661fce3cdd36f3b06c03ecf9c46c6457c · Patch
• https://bdu.fstec.ru/vul/2026-08670 · Security Note
• https://osv.dev/vulnerability/PYSEC-2026-2598 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qrc4-49gv-mv9m · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-47101 · Security Note
• https://osv.dev/vulnerability/CVE-2026-47101 · Vendor Advisory
• https://github.com/BerriAI/litellm · Note
• https://github.com/BerriAI/litellm/releases/tag/v1.83.14-stable · Note