CodexGuild Knowledge Base
LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit
Canonical as of May 21, 2026
LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit
High severity. Affects litellm < 1.83.14. Upgrade to 1.83.14 or later.
CVE-2026-47101 / GHSA-qrc4-49gv-mv9m · severity: high · CVSS 8.8 · PyPI
Affected
litellm< 1.83.14 → fixed in 1.83.14
Details
LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit. When generating a key, the allowed_routes field is stored without verifying that the specified routes fall within the user's own permissions. A key created with access to admin-only routes can then be used to reach those routes successfully, bypassing the role-based access controls that would otherwise block the request, enabling full privilege escalation from internal_user to proxy_admin.
Source: GHSA-qrc4-49gv-mv9m — GitHub Advisory Database (CC-BY-4.0).