LiteLLM allowed_routes Authorization Bypass (CVE-2026-47101) - ATR-2026-01934 (51c9a29f-cec8-5f96-a2f4-dc23bef45d11)
Detects CVE-2026-47101 (CVSS 9.9 chain, CWE-285): LiteLLM's virtual-key endpoints /key/generate, /key/update, /key/regenerate and /key/service-account/generate accept an allowed_routes parameter without validating it against the caller's own role. A low-privilege internal_user can mint or update a key whose allowed_routes reach administrative routes (user/key/team/global management), bypassing route authorization and pivoting toward proxy_admin functionality. Affected: LiteLLM before 1.83.14. Detection covers: (a) a /key/* generation or update payload whose allowed_routes include administrative/management routes or a wildcard; (b) explicit CVE-2026-47101 exploitation framing. The detection target is the request shape — a key-mint that grants itself admin routes via allowed_routes — i.e. the authorization-bypass primitive.