Description
vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust on those web servers enables an authentication bypass of the OpenAI API AuthenticationMiddleware. It allows to use the API without providing the configured VLLM_API_KEY or --api-key. This vulnerability is fixed in 0.22.0.
References (15)
Core 15
Core References
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:43038
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42132
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42142
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42644
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30088
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:30089
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-48746
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2491581
X_Refsource_Confirm x_refsource_confirm
https://github.com/vllm-project/vllm/security/advisories/GHSA-94f4-hr76-p5j6
X_Refsource_Misc x_refsource_misc
https://github.com/vllm-project/vllm/pull/43426
X_Refsource_Misc x_refsource_misc
https://x41-dsec.de/lab/advisories/x41-2026-002-starlette
Various Sources
https://x41-dsec.de/lab/advisories/x41-2026-002-starlette/
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36005
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:36006
Scores
CVSS v3
9.1
EPSS
0.0115
EPSS Percentile
63.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-444
CWE-501
Status
published
Products (3)
pypi/vllm
0.3.0 - 0.22.0PyPI
vllm/vllm
0.3.0 - 0.22.0
vllm-project/vllm
>= 0.3.0, < 0.22.0
Published
Jun 22, 2026
Tracked Since
Jun 23, 2026