Overly permissive cross-domain whitelist in vLLM - CVE-2026-115917
Published: October 21, 2026 / Updated: November 2, 2026
Vulnerability identifier: #VU156672
CSH Severity: Low
CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-115917
CWE-ID: CWE-942
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to disclose model information and model output through a victim's browser.
The vulnerability exists due to a permissive cross-origin security policy with a wildcard allowed origin in the vLLM OpenAI-compatible HTTP server's CORS middleware when handling cross-origin browser requests. A remote attacker can trick a victim into visiting a malicious web page that sends requests to an unauthenticated vLLM server reachable by the victim's browser to read model information and model output from the responses.
Affected software
vLLM
How to mitigate CVE-2026-115917
Install security update from vendor's website.
vLLM - update to 0.32.0