This vulnerability involves improper authentication in the UserAPIKeyAuth function of the MCP Proxy component in BerriAI litellm versions up to 1.59.8. An attacker can manipulate the authentication process remotely, potentially bypassing intended access controls. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low complexity, no privileges or user interaction required, and low to limited impact on confidentiality, integrity, and availability. The vendor was notified early, but no official fix or remediation level has been published. The vulnerability is documented by Red Hat but without explicit patch or mitigation instructions.

Successful exploitation allows an attacker to bypass authentication controls remotely, potentially gaining unauthorized access to the affected component. The impact on confidentiality, integrity, and availability is rated as low to limited. No known exploits are reported in the wild at this time, but public exploit code exists.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is documented, users should monitor the vendor advisory for updates. Until a patch is available, restrict network access to the affected component where possible to reduce exposure.