{
 "id": "AIR-2026-0017",
 "slug": "litellm-user-role-update-vulnerability-enables-privilege-esc",
 "title": "LiteLLM User Role Update Vulnerability Enables Privilege Escalation",
 "summary": "LiteLLM prior to version 1.83.10 lacks proper validation on user role updates via the update endpoint, allowing users to escalate their permissions to proxy administrator. This grants full administrative control over all users, teams, API keys, and model configurations.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "LiteLLM"
 ],
 "incident_date": "2026-05-21",
 "incident_date_precision": "day",
 "first_reported": "2026-05-21",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47102",
   "publisher": "NVD",
   "title": "CVE-2026-47102: LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint.",
   "published_at": "2026-05-21"
  },
  {
   "url": "https://github.com/advisories/GHSA-wpfp-gwwc-vwq6",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-47102: LiteLLM allows a user to modify their own user_role via the /user/update endpoint",
   "published_at": "2026-05-21"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-47102",
  "privilege-escalation",
  "litellm"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T07:00:14.101Z"
}