LiteLLM JWT auth allows a valid IdP JWT to impersonate any user by using an email-based fallback lookup without checking email_verified. An attacker can supply an unverified email matching a victim to inherit roles (incl. proxy_admin) and overwrite the victim’s identity binding for persistent admin access to API keys and user management. Affected: `