CVE-2026-47101: LiteLLM API key creation bypasses role-based route restrictions

Summary

LiteLLM versions prior to 1.83.14 let an authenticated internal_user create API keys with access to routes their role does not permit. The allowed_routes field is stored without checking that the specified routes fall within the user's own permissions. A key granted admin-only routes can reach them, bypassing role-based access controls and enabling full privilege escalation from internal_user to proxy_admin.

Mitigation

Fixed in 1.83.14 (LiteLLM versions prior to 1.83.14 are affected).

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• litellmPyPILLM dependency since 2023-07-27 · 54 tracked dependents

Related items

• MediumWhen LLM Gateways Go Wrong: Findings from LiteLLMSimilar attack · Check Point Research
• HighCVE-2026-109403: conductor-oss conductor server-side request forgery in agent card fetchingSimilar attack · NVD/CVE Database
• InfoExploring Backdoor Vulnerabilities and Fairness Challenges in Generative Models: A SurveySimilar attack · ACM Digital Library (TOPS, DTRAP, CSUR)
• LowSmall AI Models Could Soon Self-Replicate on IoT Devices, Anthropic WarnsSimilar attack · SecurityWeek
• MediumCVE-2026-108940: Mistral.rs path traversal through calibration_apply save_cimatrix argumentSimilar attack · NVD/CVE Database