INNER CODE UNIT · Python

parse_args

Unclecheng-li/poc-lab · AI Infrastructure/CVE-2026-47101 LiteLLM/exploit/exploit.py:168

def parse_args() -> argparse.Namespace:
    parser = argparse.ArgumentParser(description="CVE-2026-47101 LiteLLM privilege escalation PoC.")
    parser.add_argument("--target", "-t", default="http://localhost:4000", help="LiteLLM target URL.")
    parser.add_argument("--master-key", default="sk-litellm-master-key", help="Master key to create internal_user if needed.")
    parser.add_argument("--key", "-k", default=None, help="Existing internal_user API key.")
    parser.add_argument("--user-id", default=None, help="Target user_id to escalate.")
    parser.add_argument("--verify-only", action="store_true", help="Only verify current key privileges.")
    parser.add_argument("--fixed", action="store_true", help="Intended for patched-version testing; does not change logic, only semantics.")
    return parser.parse_args()


def main() -> int:
    args = parse_args()
    if args.fixed:
        print("[*] Running in fixed-mode semantic marker. Expect the exploit to fail on patched builds.")

    try:
        if args.verify_only:

View source record →