Threats tagged 'pysec-2026-4348'

vLLM versions prior to 0.32.0 have a misconfiguration in the OpenAI-compatible server where Starlette CORSMiddleware allows all origins by default. This allows a malicious web page to make cross-origin requests from a victim's browser to an unauthenticated vLLM server on localhost, internal networks, or VPNs, potentially consuming GPU resources and reading responses. The vulnerability does not enable cookie-based CSRF attacks as credentials are disabled by default, and bearer token authentication limits exposure to already authorized callers. The issue is fixed in version 0.32.0.