This vulnerability in BerriAI litellm up to version 1.63.1 allows remote attackers to bypass proper authorization controls in the Admin Key Handler component. The affected code resides in an unspecified function within the key_management_endpoints.py file. Exploitation does not require user interaction and can be performed remotely. Although a patch (23781) is recommended, no official fix or remediation level has been confirmed by the vendor as of the publication date. The CVSS 4.0 base score is 5.3, indicating medium severity.

Improper authorization may allow remote attackers with limited privileges to perform unauthorized actions within the Admin Key Handler component. This could lead to unauthorized access or manipulation of administrative keys or related management functions. The exact impact depends on the privileges gained through exploitation but is limited by the medium severity rating and the requirement of at least low privileges.

A patch named 23781 is recommended to address this vulnerability. However, the vendor has not yet confirmed an official fix or remediation level. Users should monitor the vendor advisory for updates and apply the patch once it is officially released. Until then, restrict access to the affected management endpoints to trusted users only and apply the principle of least privilege to limit potential exploitation.