CVE-2026-105759

A flaw was found in vLLM. An unauthenticated remote attacker can cause a denial of service DoS by sending requests with arbitrary, non-standard HTTP method names to unguarded server routes. Because the metrics tracking middleware records raw request methods into monitoring labels without validati...