LiteLLM User Role Update Vulnerability Enables Privilege Escalation

# LiteLLM User Role Update Vulnerability Enables Privilege Escalation

https://gcdradar.vercel.app/incidents/litellm-user-role-update-vulnerability-enables-privilege-esc · AIR-2026-0017 · closed 2026-05-21

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2026-05-21
- AI role: Attack on AI
- Products: LiteLLM
- CVE ids: CVE-2026-47102
- CVSS: 8.8

## Summary

LiteLLM prior to version 1.83.10 lacks proper validation on user role updates via the update endpoint, allowing users to escalate their permissions to proxy administrator. This grants full administrative control over all users, teams, API keys, and model configurations.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-05-21: CVE-2026-47102: LiteLLM allows a user to modify their own user_role via the /user/update endpoint (https://github.com/advisories/GHSA-wpfp-gwwc-vwq6)
- 2026-05-21: CVE-2026-47102: LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. (https://nvd.nist.gov/vuln/detail/CVE-2026-47102)

## Sources

- 2026-05-21 NVD: CVE-2026-47102: LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. https://nvd.nist.gov/vuln/detail/CVE-2026-47102
- 2026-05-21 GitHub Advisory Database: CVE-2026-47102: LiteLLM allows a user to modify their own user_role via the /user/update endpoint https://github.com/advisories/GHSA-wpfp-gwwc-vwq6

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.