2 matches found
LiteLLM CVE-2026-47101 proxy_admin privesc
CVE-2026-47101: an internaluser API key can call /key/generate with wildcard allowedroutes, then /user/update to escalate to proxyadmin. Supply masterkey to bootstrap an internal user, or an existing userkey. !/usr/bin/env python3 -- coding: utf-8 -- """LiteLLM CVE-2026-47101 internaluser to...
8.8CVSS8.1AI score0.01185EPSS
SaveExploits6References3
20