LiteLLM API Key Generation Flaw Allows Unauthorized Route Access

# LiteLLM API Key Generation Flaw Allows Unauthorized Route Access

https://gcdradar.vercel.app/incidents/litellm-api-key-generation-flaw-allows-unauthorized-route-ac · AIR-2026-0018 · closed 2026-05-21

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2026-05-21
- AI role: Attack on AI
- Products: LiteLLM
- CVE ids: CVE-2026-47101
- CVSS: 8.8

## Summary

LiteLLM prior to version 1.83.14 fails to verify allowed route permissions during API key generation for internal users. An attacker can create keys with admin-only access routes, successfully bypassing role restrictions and achieving proxy admin privileges.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-05-21: CVE-2026-47101: LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit (https://github.com/advisories/GHSA-qrc4-49gv-mv9m)
- 2026-05-21: CVE-2026-47101: LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not… (https://nvd.nist.gov/vuln/detail/CVE-2026-47101)

## Sources

- 2026-05-21 NVD: CVE-2026-47101: LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not… https://nvd.nist.gov/vuln/detail/CVE-2026-47101
- 2026-05-21 GitHub Advisory Database: CVE-2026-47101: LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit https://github.com/advisories/GHSA-qrc4-49gv-mv9m

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.