Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/16 5:36 p.m.92 views

vLLM: OpenAI auth bypass

Summary A vulnerability in ASGI web servers and starlette's trust on those web servers enables an authentication bypass of the OpenAI API AuthenticationMiddleware, which was discovered during @x41sec's source code audit. It allows to use the API without providing the configured VLLMAPIKEY or...

9.1CVSS5.5AI score0.01152EPSS
SaveExploits0References17Affected Software1
Rows per page
Query Builder