CVE-2026-105759

CVE-2026-105759 published: vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metrics middleware records the raw HTTP method token as a Prometheus label for requests reaching registered routes. An unauthenticated attacke...

View full NVD advisory → ← Back to CVE watch