Cross-Origin Resource Sharing Misconfiguration in vLLM by vLLM Project

CVE-2026-115917

What is CVE-2026-115917?

The vLLM service, an inference and serving engine for large language models, was found to have a misconfiguration in the Starlette CORSMiddleware. This issue allows an attacker to exploit a victim's browser to access an unauthenticated vLLM server running on localhost, internal networks, or VPNs. By leveraging this misconfiguration, malicious web pages can send requests to the server endpoints, enabling them to consume GPU resources and retrieve responses. As cookie-based CSRF protections are not applicable and bearer authentication is only applicable when a valid token is already available, the exposure is significant. This vulnerability has been addressed in version 0.32.0.

References