LiteLLM allows a user to modify their own user_role via the /user/update endpoint
LiteLLM allows a user to modify their own user_role via the /user/update endpoint
High severity. Affects litellm < 1.83.10. Upgrade to 1.83.10 or later.
CVE-2026-47102 / GHSA-wpfp-gwwc-vwq6 · severity: high · CVSS 8.8 · PyPI
Affected
litellm< 1.83.10 → fixed in 1.83.10
Details
LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, it does not restrict which fields may be changed. A user who can reach this endpoint can set their role to proxy_admin, gaining full administrative access to LiteLLM including all users, teams, keys, models, and prompt history. Users with the org_admin role have legitimate access to this endpoint and can exploit this vulnerability without chaining any additional flaw.
Source: GHSA-wpfp-gwwc-vwq6 — GitHub Advisory Database (CC-BY-4.0).