01 Record

CVE-2026-73555

vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

MediumPUBLISHEDCNA: GitHub_M

Base score5.3 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

02 Description

vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

Published: 2026-08-13 14:50Z1 DAY AGO
Last updated: 2026-08-14 15:57Z2 HR AGO
Reserved: 2026-08-12
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: Medium (CVSS 5.3)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses: CWE-209
SSVC decision: ExploitationnoneAutomatableyesTechnical Impactpartial
Data version: 5.2
Document digest: e78291ed9cea3d7937f6995ca2926f765d8f6c0522a9e928d832b1927f5fb381

VendorProductVersionsPlatforms

vllm-projectvllm< 0.26.0—