LiteLLM: LiteLLM allows a user to modify their own user_role via the /user/update endpoint
LiteLLM
More for LiteLLM RSS feed for LiteLLM
- Severity
- High, CVSS 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Record
- CVE-2026-47102
- Affects
- LiteLLM
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- May 21, 2026
- Source last modified
- October 8, 2026
Description
LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, it does not restrict which fields may be changed. A user who can reach this endpoint can set their role to proxy_admin, gaining full administrative access to LiteLLM including all users, teams, keys, models, and prompt history. Users with the org_admin role have legitimate access to this endpoint and can exploit this vulnerability without chaining any additional flaw.
Description quoted from the NVD record.
Who is affected
This flaw affects LiteLLM, made by BerriAI, a tool that sits between your organization's apps and AI language model services and passes requests to them. It affects versions before 1.83.10. The part of the product that lets a logged-in user update their own account does not limit which details they can change. A user who can reach that feature can make themselves a full administrator, gaining control of all users, teams, access keys, AI models and saved prompt history. Users with the organization administrator role can already reach this feature and can do this with no other flaw needed. This flaw is rated High.
What to do
- If you are not sure whether your organization uses LiteLLM, ask whoever looks after your computers and AI tools to check.
- Ask whoever runs LiteLLM which version is installed. Any version before
1.83.10has this flaw and needs the update. - If someone on your staff installed or runs LiteLLM, ask them to update it to version
1.83.10or later, which fixes this flaw. - If an IT provider or vendor runs LiteLLM for your organization, send them this advisory and ask when the update will be done.
Analysis written from the source record as of October 8, 2026 and reviewed before publishing.