CVE-2026-48746 vLLM: OpenAI auth bypass

vLLM is an inference and serving engine for large language models LLMs. From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust on those web servers enables an authentication bypass of the OpenAI API AuthenticationMiddleware. It allows to use the API without providing t...

CVE-2026-48746

vLLM OpenAI auth bypass (CVE-2026-48746) affects vLLM versions 0.3.0 through 0.21.0. Root cause: ASGI servers and Starlette trust the Host header from the request scope, enabling manipulation of the reconstructed URL path and bypassing the OpenAI API AuthenticationMiddleware for routes beginning ...

aana (>=0.2.1, <=0.2.2.2), ado-vllm-performance (>=1.2.2, <=1.3.3) +117 more potentially affected by CVE-2026-48746 via vllm (>=0.3.0, <=0.21.0)

vllm PYPI version =0.3.0, =0.2.1, =1.2.2, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =0.1.0, =0.1.15rc1, =0.1.0, =0.1.0, =0.0.1, =1.0.1rc1, =1.1.8 and more Source cves: CVE-2026-48746 Source advisory: GHSA-94F4-HR76-P5J6...