← Vulnerability feed

Vulnerability record · CVE-2026-48746 · published 22 June 2026

CVE-2026-48746: Vllm http request smuggling vulnerability

Vllm · Vllm

vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust on those web servers enables an authentication bypass of the OpenAI API AuthenticationMiddleware. It allows to use the API without providing the configured VLLM_API_KEY or --api-key. This vulnerability is fixed in 0.22.0.

9.1 CVSS 3.1 Critical EPSS 1.2% · top 34.4% CWE-444 · HTTP request smugglingCWE-501 · CWE-501
9.1CVSS 3.1 base score
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
17References
16 Sep 2026Last modified by NVD

Description

vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust on those web servers enables an authentication bypass of the OpenAI API AuthenticationMiddleware. It allows to use the API without providing the configured VLLM_API_KEY or --api-key. This vulnerability is fixed in 0.22.0.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/vllm-project/vllm/pull/43426 Issue Tracking
https://github.com/vllm-project/vllm/security/advisories/GHSA-94f4-hr76-p5j6 Third Party Advisory
https://x41-dsec.de/lab/advisories/x41-2026-002-starlette Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:30088
https://access.redhat.com/errata/RHSA-2026:30089
https://access.redhat.com/errata/RHSA-2026:36005
https://access.redhat.com/errata/RHSA-2026:36006
https://access.redhat.com/errata/RHSA-2026:42132
https://access.redhat.com/errata/RHSA-2026:42142
https://access.redhat.com/errata/RHSA-2026:42644
https://access.redhat.com/errata/RHSA-2026:43038
https://access.redhat.com/errata/RHSA-2026:61627
https://access.redhat.com/errata/RHSA-2026:61629
https://access.redhat.com/security/cve/CVE-2026-48746
https://bugzilla.redhat.com/show_bug.cgi?id=2491581
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48746.json
https://x41-dsec.de/lab/advisories/x41-2026-002-starlette Third Party Advisory

Track CVE-2026-48746 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-25960Vllm server-side request forgery (ssrf) vulnerabilityvLLM is an inference and serving engine for large language models (LLMs). The SSRF protection fix for CVE-2026-24779 add in 0.15.1 can be bypassed in…EPSS 0.72%9.8CVE-2026-22778Vllm sensitive information in log file vulnerabilityvLLM is an inference and serving engine for large language models (LLMs). From 0.8.3 to before 0.14.1, when an invalid image is sent to vLLM's multim…EPSS 3.8%9.8CVE-2026-22807Vllm code injection vulnerabilityvLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.14.0, vLLM loads Hugging …EPSS 0.83%9.8CVE-2025-47277Vllm deserialization of untrusted data vulnerabilityvLLM, an inference and serving engine for large language models (LLMs), has an issue in versions 0.6.5 through 0.8.4 that ONLY impacts environments u…EPSS 0.96%9.8CVE-2025-32444Vllm deserialization of untrusted data vulnerabilityvLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.6.5 and prior to 0.8.5, having vLLM in…EPSS 1.8%9.8CVE-2024-11041Vllm deserialization of untrusted data vulnerabilityvllm-project vllm version v0.6.2 contains a vulnerability in the MessageQueue.dequeue() API function. The function uses pickle.loads to parse receive…EPSS 1.6%9.0CVE-2025-29783Vllm deserialization of untrusted data vulnerabilityvLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. When vLLM is configured to use Mooncake, unsafe deserialization…EPSS 0.73%8.8CVE-2026-54232Vllm uncontrolled search path element vulnerabilityvLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusio…EPSS 0.56%

Source: NIST National Vulnerability Database (record CVE-2026-48746), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.