This vulnerability affects BerriAI litellm up to versions 1.63.0 and 1.63.1. It is caused by improper authorization in an unspecified function of the Admin Key Handler component, allowing remote attackers to potentially perform unauthorized actions. The issue resides in the key_management_endpoints.py file. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. The vendor was notified early, but no official fix or patch has been published yet. Exploit details have been publicly disclosed, but no known active exploitation in the wild is reported.

The improper authorization flaw allows remote attackers to bypass intended access controls within the Admin Key Handler component, potentially leading to unauthorized administrative actions. This could compromise key management functions, affecting the security posture of the affected system. The medium CVSS score reflects a moderate risk due to the ease of remote exploitation without user interaction but limited impact scope as per available data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch has been published, users should monitor vendor communications for updates. Until a fix is available, restrict access to the affected management endpoints and apply network-level controls to limit exposure. Avoid exposing the vulnerable component to untrusted networks where possible.