CVE-2026-115917 | vllm-project vLLM up to 0.31.x CORSMiddleware cross-site request forgery

October 26, 2026 Yanac

A vulnerability identified as problematic has been detected in vllm-project vLLM up to 0.31.x. The affected element is an unknown function of the component CORSMiddleware. The manipulation leads to cross-site request forgery.

This vulnerability is referenced as CVE-2026-115917. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More