Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-47101 Details

Description

LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit. When generating a key, the allowed_routes field is stored without verifying that the specified routes fall within the user's own permissions. A key created with access to admin-only routes can then be used to reach those routes successfully, bypassing the role-based access controls that would otherwise block the request, enabling full privilege escalation from internal_user to proxy_admin.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: redhat-SADPCVSS-B:8.8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://access.redhat.com/security/cve/CVE-2026-47101	redhat-SADP
https://bugzilla.redhat.com/show_bug.cgi?id=2480635	redhat-SADP
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47101.json	redhat-SADP
https://gist.github.com/13ph03nix/9ec616e1fdc77b3673509c60206e827f	[email protected]	ExploitMitigationThird Party Advisory
https://github.com/BerriAI/litellm/commit/2220f3076ac89bd2a2e3439acf57dcfbec2434c9	[email protected]	Patch
https://github.com/BerriAI/litellm/commit/5190bd07eb23a037745d86328096f54378f1614a	[email protected]	Patch
https://github.com/BerriAI/litellm/commit/d910a95661fce3cdd36f3b06c03ecf9c46c6457c	[email protected]	Patch
https://github.com/BerriAI/litellm/releases/tag/v1.83.14-stable	[email protected]	Release Notes
https://huntr.com/bounties/8e75edfb-ff05-4e63-bfca-2d93d03fb3b9	[email protected]	ExploitThird Party Advisory
https://www.obsidiansecurity.com/blog/litellm-privilege-escalation-rce	[email protected]
https://www.vulncheck.com/advisories/litellm-privilege-escalation-via-api-key-generation	[email protected]	Third Party Advisory

see all 11 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-639	Authorization Bypass Through User-Controlled Key	redhat-SADP
CWE-863	Incorrect Authorization	[email protected]

Affected Products

Product	Versions
litellm litellm	< 1.83.14
CPE cpe:2.3:a:litellm:litellm:::::::: Remediation No remediation found in references.

Change History

10 change records found show changes

Date	Action	Recorded By
Jul 23, 2026	CVE Translated	[email protected]
Jul 15, 2026	CVE Modified	redhat-SADP
Jul 14, 2026	CVE Modified	[email protected]
Jul 1, 2026	CVE Modified	redhat-SADP
Jun 30, 2026	CVE Modified	redhat-SADP
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 17, 2026	CVE Modified	[email protected]
Jun 11, 2026	CVE Modified	[email protected]
May 22, 2026	Initial Analysis	[email protected]
May 21, 2026	New CVE Received	[email protected]