{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/litellm--1.83.14/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-47101"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["LiteLLM \u003c 1.83.14"],"_cs_severities":["high"],"_cs_tags":["privilege-escalation","vulnerability","CVE-2026-47101"],"_cs_type":"advisory","_cs_vendors":["LiteLLM"],"content_html":"\u003cp\u003eLiteLLM versions prior to 1.83.14 are vulnerable to a privilege escalation flaw. An authenticated \u003ccode\u003einternal_user\u003c/code\u003e can create API keys with permissions exceeding their assigned roles. The vulnerability exists because the \u003ccode\u003eallowed_routes\u003c/code\u003e field is stored without validating that the specified routes are within the user's authorized permissions. By creating a key with access to \u003ccode\u003eadmin-only\u003c/code\u003e routes, the attacker can bypass role-based access controls and elevate their privileges to \u003ccode\u003eproxy_admin\u003c/code\u003e. This allows the attacker to perform actions normally restricted to administrators, such as accessing sensitive data, modifying configurations, or disrupting services. Defenders should upgrade to version 1.83.14 or later to mitigate this vulnerability.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker authenticates as an \u003ccode\u003einternal_user\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eAttacker initiates the API key creation process.\u003c/li\u003e\n\u003cli\u003eAttacker specifies \u003ccode\u003eallowed_routes\u003c/code\u003e that include \u003ccode\u003eadmin-only\u003c/code\u003e routes.\u003c/li\u003e\n\u003cli\u003eThe system stores the \u003ccode\u003eallowed_routes\u003c/code\u003e without proper validation against the user's permissions.\u003c/li\u003e\n\u003cli\u003eAttacker obtains the newly created API key.\u003c/li\u003e\n\u003cli\u003eAttacker uses the API key to access the \u003ccode\u003eadmin-only\u003c/code\u003e routes.\u003c/li\u003e\n\u003cli\u003eThe system incorrectly authorizes the request based on the API key's \u003ccode\u003eallowed_routes\u003c/code\u003e, bypassing role-based access controls.\u003c/li\u003e\n\u003cli\u003eAttacker successfully executes actions normally restricted to \u003ccode\u003eproxy_admin\u003c/code\u003e, achieving full privilege escalation.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability allows an attacker to escalate their privileges from \u003ccode\u003einternal_user\u003c/code\u003e to \u003ccode\u003eproxy_admin\u003c/code\u003e. This grants the attacker full control over the LiteLLM instance, potentially leading to unauthorized access to sensitive data, modification of system configurations, and disruption of services. The severity is high due to the potential for complete system compromise and the ease of exploitation once the initial authentication is achieved.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade LiteLLM to version 1.83.14 or later to patch CVE-2026-47101.\u003c/li\u003e\n\u003cli\u003eImplement the \u0026quot;Detect API Key Creation with Elevated Permissions\u0026quot; Sigma rule to identify attempts to create API keys with unauthorized routes.\u003c/li\u003e\n\u003cli\u003eImplement the \u0026quot;Detect API Access Using Newly Created Key\u0026quot; Sigma rule to identify unauthorized API access using newly created API keys.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-05-21T21:18:27Z","date_published":"2026-05-21T21:18:27Z","id":"https://feed.craftedsignal.io/briefs/2026-05-litellm-privesc-b8966cad/","summary":"LiteLLM versions prior to 1.83.14 allow an authenticated internal user to create API keys that bypass role-based access controls, potentially leading to full privilege escalation to proxy_admin due to a lack of verification of specified routes within the user's own permissions (CVE-2026-47101).","title":"LiteLLM Privilege Escalation via API Key Creation (CVE-2026-47101)","url":"https://feed.craftedsignal.io/briefs/2026-05-litellm-privesc-b8966cad/"}],"language":"en","title":"CraftedSignal Threat Feed - LiteLLM \u003c 1.83.14","version":"https://jsonfeed.org/version/1.1"}