CVE-2026-47102

Name of the Vulnerable Software and Affected Versions LiteLLM versions prior to 1.83.10

Description An issue exists where the '/user/update' endpoint does not restrict which fields a user can modify when updating their own account. This allows a user to change their user role to proxy admin, granting full administrative access to all users, teams, keys, models, and prompt history. Users with the org admin role can exploit this directly as they have legitimate access to the endpoint.

Recommendations Update to version 1.83.10 or later. As a temporary workaround, restrict access to the '/user/update' endpoint to prevent unauthorized modification of the user role variable.