Which versions of Litellm are affected by EUVD-2026-31345?

LiteLLM versions prior to 1.83.10 contain a privilege escalation vulnerability in the /user/update endpoint with publicly available exploit code, allowing privilege escalation to proxy_admin status…. A patch is available.

How to fix or mitigate EUVD-2026-31345?

Within 24 hours: Identify all LiteLLM deployments and determine if affected versions (prior to 1.83.10) are running; immediately restrict /user/update endpoint access via firewall/WAF rules to authorized administrative accounts only and enable detailed API logging. Within 7 days: Audit all user accounts for unauthorized privilege escalations, review modification logs for suspicious activity, and implement application-level validation rejecting user_role field modifications in account self-updates. Within 30 days: Establish daily monitoring of vendor security advisories for patch release; execute immediate upgrade to version 1.83.10 or later when available.

Litellm EUVD-2026-31345

Q: What is the CVSS score of EUVD-2026-31345?

EUVD-2026-31345 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

| CVE-2026-47102 HIGH

Incorrect Authorization (CWE-863)

2026-05-21 disclosure@vulncheck.com

GHSA-wpfp-gwwc-vwq6

Authentication Bypass Litellm

8.7

CVSS 4.0 · Vendor: vulncheck

Severity by source

Vendor (vulncheck) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Red Hat

8.8 HIGH

qualitative

Primary rating from Vendor (vulncheck).

CVSS VectorVendor: vulncheck

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

May 21, 2026 - 22:02 EUVD

Source Code Evidence Fetched

May 21, 2026 - 21:31 vuln.today

Analysis Generated

May 21, 2026 - 21:31 vuln.today

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

15 pypi packages depend on litellm (14 direct, 1 indirect)

Ecosystem-wide dependent count for version 1.83.10.

DescriptionCVE.org

LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint. While the endpoint correctly restricts users to updating only their own account, it does not restrict which fields may be changed. A user who can reach this endpoint can set their role to proxy_admin, gaining full administrative access to LiteLLM including all users, teams, keys, models, and prompt history. Users with the org_admin role have legitimate access to this endpoint and can exploit this vulnerability without chaining any additional flaw.

AnalysisAI

Privilege escalation in LiteLLM prior to 1.83.10 allows any authenticated user with access to the /user/update endpoint to elevate themselves to proxy_admin by including a user_role field in a self-update request. The endpoint enforces ownership (users can only update their own account) but fails to restrict which fields are mutable, granting full administrative control over users, teams, keys, models, and prompt history. Publicly available exploit code exists via a published huntr.com bounty writeup and gist PoC, though no public exploit identified as actively used in the wild at time of analysis.