BerriAI litellm Admin Key key_management_endpoints.py improper authorization

An attacker with a valid `internal_user` API key can call the `/key/block` or `/key/unblock` endpoints against any key in the system, including administrative (`proxy_admin`) keys. Because the endpoint logic only checks that the caller has the `internal_user` role (via middleware) and does not verify ownership or require a higher privilege level, the attacker can block or unblock arbitrary keys remotely. This constitutes a privilege escalation and can be used to cause a denial of service against administrative or production keys. [CWE-285]

The vulnerability resides in `litellm/proxy/management_endpoints/key_management_endpoints.py`, specifically in the `block_key` and `unblock_key` functions. The admin key handler fails to enforce ownership or role-based (e.g., `proxy_admin`) access controls on the target key being operated on.

The patch (named 23781) is not included in the bundle, so the exact diff is unavailable. Based on the advisory [ref_id=2], the fix must add ownership verification or a `proxy_admin` role check inside the `block_key` and `unblock_key` endpoint implementations, ensuring that a caller cannot modify a key they do not own unless they hold the administrative role. Without this change, any `internal_user` can arbitrarily block or unblock any key in the system.