CVE-2026-48746 | vLLM up to 0.21.x OpenAI API request smuggling (GHSA-94f4-hr76-p5j6)

A vulnerability was found in vLLM up to 0.21.x. It has been rated as critical. This issue affects some unknown processing of the component OpenAI API. The manipulation leads to http request smuggling.

This vulnerability is uniquely identified as CVE-2026-48746. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.