Vulnerability · Published Jul 13, 2026 · Assigned by redhat

CVE-2026-15574Vllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug default

High 7.5

In plain English

A high-severity security flaw in Red Hat OpenShift AI 2.25 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.5%top 55.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw was found in the vllm-orchestrator-gateway component. The system's production binary logs all incoming authorization headers and full chat payloads, which may contain personally identifiable information (PII) and secrets, to persistent logs. This sensitive data, including bearer tokens and chat content, can be accessed by any user with logging privileges. This vulnerability leads to information disclosure, potentially allowing an attacker to harvest credentials and sensitive conversation content.

Affected products (as reported)

Vendor	Product	Versions
Red Hat	Red Hat OpenShift AI 2.25	see references
Red Hat	Red Hat OpenShift AI 3.4	see references

Weakness: CWE-538 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

RHSA-2026:84734 vendor-advisory, x_refsource_REDHAT
RHSA-2026:87410 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-15574 vdb-entry, x_refsource_REDHAT
RHBZ#2499594 issue-tracking, x_refsource_REDHAT