BerriAI litellm up to 1.83.13 API Key authorization

Summaryinfo

A vulnerability was found in BerriAI litellm up to 1.83.13. It has been declared as critical. Impacted is an unknown function of the component API Key Handler. Such manipulation leads to authorization. This vulnerability is traded as CVE-2026-47101. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in BerriAI litellm up to 1.83.13. It has been rated as critical. Affected by this issue is some unknown processing of the component API Key Handler. The manipulation with an unknown input leads to a authorization vulnerability. Using CWE to declare the problem leads to CWE-863. The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions. Impacted is confidentiality, integrity, and availability. CVE summarizes:

LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their role does not permit. When generating a key, the allowed_routes field is stored without verifying that the specified routes fall within the user's own permissions. A key created with access to admin-only routes can then be used to reach those routes successfully, bypassing the role-based access controls that would otherwise block the request, enabling full privilege escalation from internal_user to proxy_admin.

The weakness was shared by Fenix Qiao. The advisory is shared for download at gist.github.com. This vulnerability is handled as CVE-2026-47101 since 05/18/2026. The exploitation is known to be easy. The attack may be launched remotely. There are neither technical details nor an exploit publicly available.

Upgrading to version 1.83.14 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying the patch 2220f3076ac89bd2a2e3439acf57dcfbec2434c9 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the databases at CNNVD (CNNVD-202605-4659), EUVD (EUVD-2026-31346) and CERT Bund (WID-SEC-2026-1647). Once again VulDB remains the best source for vulnerability data.

Affected

• Open Source LiteLLM

Productinfo

Vendor

• BerriAI

Name

• litellm

Version

• 1.83.0
• 1.83.1
• 1.83.2
• 1.83.3
• 1.83.4
• 1.83.5
• 1.83.6
• 1.83.7
• 1.83.8
• 1.83.9
• 1.83.10
• 1.83.11
• 1.83.12
• 1.83.13

License

• open-source

Website

• Product: https://github.com/BerriAI/litellm/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion