vLLM CORS Vulnerability: The API Key Never Covered /invocations
vLLM before 0.32.0 let any web page read model output via the browser, even with --api-key set. Checks and fixes for CVE-2026-115917.
Written by
Error-proof Cyber Solutions
Securing the digital frontier. Error-proof cyber solutions.
Responses
Markdown supported · ⌘↵ to post
No responses yet.