This vulnerability involves improper authentication in the UserAPIKeyAuth function of the MCP Proxy component within BerriAI litellm versions 1.59.0 through 1.59.8. An attacker can remotely manipulate the authentication process, potentially bypassing intended access controls. The CVSS 4.0 base score is 6.9, indicating a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vendor was contacted early, but no official fix or mitigation has been published as of the data available.

Successful exploitation could allow an unauthenticated remote attacker to bypass authentication controls in the affected component, potentially gaining unauthorized access to the system or services protected by the UserAPIKeyAuth function. The impact is limited to the scope of the MCP Proxy component within litellm. There is no indication of privilege escalation or complete system compromise from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No vendor-provided mitigations or temporary fixes are currently available.