CVE-2026-93355
Description
A flaw was found in LiteLLM. This vulnerability allows an authenticated remote attacker to achieve privilege escalation and account takeover by presenting a valid JSON Web Token (JWT) containing an unverified email address that matches an existing user account. Because the authentication process falls back to an email-based lookup without checking if the email is verified, the application associates the attacker's session with the victim's profile. As a result, an attacker can inherit administrative privileges, overwrite account identity bindings, and maintain persistent unauthorized access to administrative endpoints and API keys.
Statement
This vulnerability is rated as Important severity rather than Moderate because a low-privileged authenticated user can achieve full privilege escalation and administrative takeover across the deployment. In Red Hat OpenShift AI and Ansible Automation Platform environments where LiteLLM integrates with external token issuers, the service omits confirmation of email claim validation during user mapping. An attacker with a valid token containing an unconfirmed target address can seize control of administrative accounts, gaining persistent access to management interfaces and exposed credential stores.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 8.1 | N/A | 8.1 |
| Attack Vector | Network | N/A | Network |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | Low | N/A | Low |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | High | N/A | High |
| Integrity Impact | High | N/A | High |
| Availability Impact | None | N/A | None |
Vector
Red Hat: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
cve.org: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Understanding the Weakness (CWE)
Access Control
Technical Impact: Bypass Protection Mechanism; Gain Privileges or Assume Identity
This weakness can allow an attacker to access resources which are not otherwise accessible without proper authentication.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
