LiteLLM CVE-2026-114612 allows privilege escalation to proxy admin

CVE-2026-114612 (CVSS 9.9) affects LiteLLM 1.87.0 through 1.104.0-rc.1: reused AES-256-GCM context without domain separation lets a low-privilege user escalate to proxy_admin and achieve RCE via MCP stdio. Fixes ship in 1.100.4, 1.101.3, 1.102.2, 1.103.1 and 1.104.0-rc.2.

• CVSS 9.9: authenticated user gains full proxy_admin privileges
• Root cause is a shared AES-256-GCM context for secrets and session tokens
• A PoC exploit exists in LiteLLM's official E2E regression test
• Patched in 1.100.4, 1.101.3, 1.102.2, 1.103.1 and 1.104.0-rc.2