vLLM permissive CORS and unauthenticated local inference, CVE-2026-115917

Evidence record

Advisory on browser-origin requests reaching loopback model serving without a configured API key.

Read the original source ↗

Claim-level citations (2)

• supportsvLLM browser origins could access an unauthenticated loopback inference server: The vLLM advisory describes permissive origin policy combined with absent API-key authentication, allowing another website’s JavaScript to invoke a reachable loopback or private inference server.

  GHSA-vvpg-rrww-wpmh: wildcard CORS, no API key and loopback browser proof

• supportsvLLM browser origins could access an unauthenticated loopback inference server: An AI model server that advertised permissive CORS to any browser origin and accepted requests without an API key could be invoked from an attacker-controlled web page. The vulnerable configuration requires reachable loopback or private-network serving without separate token authentication; hosts with mandatory API keys are different. JavaScript on an unrelated website could list available models or consume local inference resources through the user’s browser.

  GHSA-vvpg-rrww-wpmh: wildcard CORS, no API key and loopback browser proof