Bug 2542631 (CVE-2026-93355)

Summary: CVE-2026-93355 litellm: LiteLLM: Privilege escalation via unverified email lookup in JWT authentication
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: unspecifiedCC: dschmidt, ebourniv, hasun, ikhan, ilpinto, jlanda, jwong, kshier, ltomasbo, nyancey, omaciel, ptisnovs, rbobbitt, sbunciak, simaishi, stcannon, yguenane, ykashtan
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in LiteLLM. This vulnerability allows an authenticated remote attacker to achieve privilege escalation and account takeover by presenting a valid JSON Web Token (JWT) containing an unverified email address that matches an existing user account. Because the authentication process falls back to an email-based lookup without checking if the email is verified, the application associates the attacker's session with the victim's profile. As a result, an attacker can inherit administrative privileges, overwrite account identity bindings, and maintain persistent unauthorized access to administrative endpoints and API keys.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-09-28 19:56:30 UTC 
LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in the JWT authentication flow without verifying the email_verified claim. Attackers can present a token with an unverified email address matching a victim's account to inherit the victim's role, including proxy_admin privileges, and permanently overwrite the victim's stored identity binding to retain persistent unauthorized access to administrative endpoints exposing API keys and user management.