CVE-2026-48746

[CVE catalog]

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). This vulnerability, residing in ASGI web servers and Starlette's trust in them, allows an attacker to bypass the OpenAI API Authentication Middleware. This bypass enables unauthorized access to the API without requiring the configured VLLM_API_KEY or --api-key, leading to critical unauthorized operations. vllm: starlette: vLLM: Critical authentication bypass allows unauthorized API access CVE-2026-48746 is an authentication bypass in the vLLM OpenAI-compatible API server. A remote attacker who can reach the vLLM endpoint directly can craft a Host header so the authentication middleware checks a different URL path than the one actually dispatched, bypassing VLLM_API_KEY / --api-key protection. Successful exploitation allows unauthorized inference API access, which can result in confidentiality loss (model/prompt abuse) and availability impact (resource exhaustion). The flaw does not provide integrity compromise or arbitrary code execution. Exploitation requires vLLM API-key authentication to be enabled and the service to be exposed without an RFC-conforming reverse proxy that normalizes the Host header. Because Red Hat AI inference offerings are commonly deployed behind OpenShift Routes or similar proxies, and because the vulnerability is conditional on deployment and configuration, the overall flaw impact is rated Important rather than Critical. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Severity

Critical · CVSS 9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Published

Jun 16, 2026, 5:36:41 PM UTC

Source

[NVD] · [CVE record]

EPSS

1.15% · Oct 27, 2026

{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "vllm",
      "ecosystem": "cpe",
      "fixed_version": "0.22.0"
    },
    {
      "name": "vllm",
      "ranges": [
        {
          "fixed": "0.22.0",
          "introduced": "0.3.0",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "fixed_version": "0.22.0",
      "provider_record_id": "NVD-CVE-2026-48746"
    },
    {
      "name": "vllm",
      "ecosystem": "pip",
      "fixed_version": "0.22.0",
      "provider_record_id": "GHSA-94F4-HR76-P5J6"
    }
  ]
}