The vulnerability is located in the ui_view_users function within litellm/proxy/management_endpoints/internal_user_endpoints.py. The function fails to perform proper authorization checks, enabling an attacker to retrieve or manipulate internal user data through the endpoint. Because this endpoint is exposed over the network, the attack can be launched remotely without requiring local privileges. The weakness is classified as improper authorization (CWE-266 and CWE-285).

BerriAI:litellm, versions up to and including 1.82.2 are affected. No other versions beyond 1.82.2 have been reported to contain the vulnerability.

The CVSS score is 5.3, indicating moderate risk. EPSS data is unavailable, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote network access to the exposed internal management API. Because the flaw exists in application code, it can be exploited by sending crafted requests to the ui_view_users endpoint without needing elevated privileges on the host.