This vulnerability affects the BerriAI litellm product, specifically the ui_view_users function in litellm/proxy/management_endpoints/internal_user_endpoints.py. It stems from an incomplete fix of CVE-2025-0628, leading to improper authorization that allows remote attackers to potentially access or manipulate user-related functionality without proper permissions. The vulnerability has been publicly disclosed, but there is no confirmed remediation or patch available as of the publication date.

The improper authorization flaw allows remote attackers to bypass intended access controls in the ui_view_users function, potentially exposing user information or functionality that should be restricted. The CVSS 4.0 base score of 5.3 indicates a medium impact with network attack vector, low complexity, no privileges required, and no user interaction needed. There is no indication of elevated privileges or confidentiality, integrity, or availability impacts beyond the authorization bypass.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch has been published, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to the affected endpoint or implementing additional access controls as a temporary mitigation.