Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2026/06/16 5:36 p.m.122 views

vLLM: OpenAI auth bypass

Summary A vulnerability in ASGI web servers and starlette's trust on those web servers enables an authentication bypass of the OpenAI API AuthenticationMiddleware, which was discovered during @x41sec's source code audit. It allows to use the API without providing the configured VLLMAPIKEY or...

9.1CVSS5.5AI score0.01152EPSS
SaveExploits0References19Affected Software1
Rows per page
Query Builder