CVE-2026-115917— vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server

Quick assessment

Copy summary Copy citation

Affected

vllm-project vllm

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

vLLM 是一个用于大型语言模型的推理与服务引擎。在 0.32.0 版本之前，其兼容 OpenAI 的服务器默认将 Starlette 的 CORSMiddleware 配置为允许所有来源（即 allowed_origins 设置为通配符）。攻击者可利用恶意网页，通过受害者的浏览器访问位于本地主机、内网或 VPN 中的未认证 vLLM 服务器，调用包括 GET /v1/models 和 POST /v1/chat/completions 在内的接口，从而消耗 GPU 资源并读取响应内容。由于默认禁用了凭据，基于 C

CVE-2026-115917 affects vllm-project vllm. No confirmed in-the-wild exploitation; assess based on exposure. vLLM 是一个用于大型语言模型的推理与服务引擎。在 0.32.0 版本之前，其兼容 OpenAI 的服务器默认将 Starlette 的 CORSMiddleware 配置为允许所有来源（即 allowed_origins 设置为通配符）。攻击者可利用恶意网页，通过受害者的浏览器访问位于本地主机、内网或 VPN 中的未认证 vLLM 服务器，调用包括 GE CVE-2026-115917 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-115917

I. Basic Information for CVE-2026-115917

Affected Products

II. Public POCs for CVE-2026-115917

III. Intelligence Information for CVE-2026-115917

Patches & Fixes for CVE-2026-115917 (2)

• 🔗 [Security] Restrict default CORS origins by jperezdealgaba · Pull Request #61009 · vllm-project/vllm Read full article x_refsource_MISC
• 🔗 [Security] Restrict default CORS origins (#61009) · vllm-project/vllm@fcae5c9 · GitHub x_refsource_MISC

Vendor Advisories for CVE-2026-115917 (1)

• 🔗 Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server · Advisory · vllm-project/vllm · GitHub Read full article x_refsource_CONFIRM

Vendor Pages for CVE-2026-115917 (1)

• 🔗 Release v0.32.0 · vllm-project/vllm · GitHub Read full article x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2026-115917

Same Patch Batch · vllm-project · 2026-10-26 · 8 CVEs total

IV. Related Vulnerabilities