CVE-2026-47101

CVE Enrichment

CVSS: 8.7 HIGH
EPSS: 1.19%
EPSS Percentile: 67.80%
CISA KEV: Not listed

Description

LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit. When generating a key, the allowed_routes field is stored without verifying that the specified routes fall within the user's own permissions. A key created with access to admin-only routes can then be used to reach those routes successfully, bypassing the role-based access controls that would otherwise block the request, enabling full privilege escalation from internal_user to proxy_admin.

Technical Details

CVSS Version: 4.0
CNA / NVD Source: [email protected]
Published: 22-May-2026 04:16
Last Modified: 08-Oct-2026 23:17
EPSS Date: 2026-10-30
CWE: CWE-863, CWE-639

CVSS Vector


            CVSS:4.0                            AV:N /
                            AC:L /
                            AT:N /
                            PR:L /
                            UI:N /
                            VC:H /
                            VI:H /
                            VA:H /
                            SC:N /
                            SI:N /
                            SA:N /
                            E:X /
                            CR:X /
                            IR:X /
                            AR:X /
                            MAV:X /
                            MAC:X /
                            MAT:X /
                            MPR:X /
                            MUI:X /
                            MVC:X /
                            MVI:X /
                            MVA:X /
                            MSC:X /
                            MSI:X /
                            MSA:X /
                            S:X /
                            AU:X /
                            R:X /
                            V:X /
                            RE:X /
                            U:X

Affected Products / Versions

litellm / litellm Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 1.83.14
cpe:2.3:a:litellm:litellm:*:*:*:*:*:*:*:*

References

Last enrichment sync: 31-Oct-2026 08:19
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

#LiteLLM Three LiteLLM Vulnerabilities Could Let Low-Privilege Users Take Over AI Gateways

CVE (3)

MITRE ATT&CK (3)

Vendors (1)

Products (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.