Critical severity · published Jun 22, 2026
CVE-2026-48746
vLLM: OpenAI auth bypass
9.1
CVSS
1.2%
EPSS
No
On KEV
Description
vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust on those web servers enables an authentication bypass of the OpenAI API AuthenticationMiddleware. It allows to use the API without providing the configured VLLM_API_KEY or --api-key. This vulnerability is fixed in 0.22.0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VL
vllm · vllm-project
>= 0.3.0, < 0.22.0 · source: vendor, NVD
EI
Exploit Intelligence · Red Hat
All versions, or not specified · source: CISA
OL
OpenShift Lightspeed · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat AI Inference Server · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat AI Inference Server 3.2 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat AI Inference Server 3.3 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat Ansible Automation Platform 2 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat Ansible Automation Platform 2.6 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat Ansible Automation Platform 2.7 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat Enterprise Linux AI (RHEL AI) 3 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat Migration Toolkit for Applications 8.2 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat OpenShift AI (RHOAI) · Red Hat
All versions, or not specified · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-48746
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-48746
Issue Tracking
https://github.com/vllm-project/vllm/pull/43426
Third Party Advisory
https://github.com/vllm-project/vllm/security/advisories/GHSA-94f4-hr76-p5j6
Third Party Advisory
https://x41-dsec.de/lab/advisories/x41-2026-002-starlette
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:30088
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:30089
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:36005
More from vllm
9.8
CVE-2024-9053
vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer() RPC server entrypoints
8.8
CVE-2026-54232
vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile
8.2
CVE-2026-116176
vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector
8.1
CVE-2026-115915
vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE
8.1
CVE-2026-114053
vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision