CVE Feed

    Dashboard / CVE / CVE-2026-48746

    CVE-2026-48746

    vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust on those web servers enables an authentication bypass of the OpenAI API AuthenticationMiddleware. It allows to use the API without providing the configured VLLM_API_KEY or --api-key. This vulnerability is fixed in 0.22.0.

    Published:Jun 22, 2026
    Last Modified:Sep 1, 2026
    EPS:Jun 22, 2026
    EPSS Score:0.01152
    CVSS Score:9.1

    Affected Products

    Vendor
    Vllm
    Product
    Vllm
    Vendor
    Vllm-project
    Product
    Vllm

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-273 HTTP Response Smuggling
    CAPEC-33 HTTP Request Smuggling

    Related CVEs

    CVE-2026-78684 (CVSS 6.9) — vLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit enforcement in…
    CVE-2026-41523 (CVSS 7.5) — vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, an assert-based sec…
    CVE-2026-56340 (CVSS 8.7) — vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing.…
    CVE-2025-71379 (CVSS 5.3) — vLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS) vulnerabiliti…
    CVE-2026-5497 (CVSS 7.5) — vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to u…
    CVE-2026-44223 (CVSS 6.5) — vLLM is an inference and serving engine for large language models (LLMs). From 0.18.0 to before 0.20.0, the ex…
    CVE-2026-44222 (CVSS 6.5) — vLLM is an inference and serving engine for large language models (LLMs). From 0.6.1 to before 0.20.0, there i…
    CVE-2026-7141 (CVSS 2.9) — A vulnerability was found in vLLM up to 0.19.0. The affected element is the function has_mamba_layers of the f…
    CVE-2026-34756 (CVSS 6.5) — vLLM is an inference and serving engine for large language models (LLMs). From 0.1.0 to before 0.19.0, a Denia…
    CVE-2026-34755 (CVSS 6.5) — vLLM is an inference and serving engine for large language models (LLMs). From 0.7.0 to before 0.19.0, the Vid…

    References

    https://github.com/vllm-project/vllm/pull/43426
    https://github.com/vllm-project/vllm/security/advisories/GHSA-94f4-hr76-p5j6
    https://x41-dsec.de/lab/advisories/x41-2026-002-starlette
    https://access.redhat.com/errata/RHSA-2026:30088
    https://access.redhat.com/errata/RHSA-2026:30089
    https://access.redhat.com/errata/RHSA-2026:36005
    https://access.redhat.com/errata/RHSA-2026:36006
    https://access.redhat.com/errata/RHSA-2026:42132
    https://access.redhat.com/errata/RHSA-2026:42142
    https://access.redhat.com/errata/RHSA-2026:42644
    https://access.redhat.com/errata/RHSA-2026:43038
    https://access.redhat.com/errata/RHSA-2026:61627
    https://access.redhat.com/errata/RHSA-2026:61629
    https://access.redhat.com/security/cve/CVE-2026-48746
    https://bugzilla.redhat.com/show_bug.cgi?id=2491581
    https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48746.json
    https://x41-dsec.de/lab/advisories/x41-2026-002-starlette

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High