vLLM Semantic Router Istio policy bypass: one header skips the security filter
colinmcnamara · x · 2026-11-13
Colin McNamara discloses a policy bypass in vLLM Semantic Router's Istio integration: two filters sharing a name let a single routing header skip the policy guard, returning 200 with no log trace. Finding the bug took a day, the fix (a rename) an hour, the advisory went public six days later — but reaching other projects with the same pattern took two weeks. He urges anyone running Istio 1.27+ with an InferencePool route and a third-party extproc filter to check their gateway. Full write-up plus his AIMUG talk included.
Related event: Policy Bypass Flaw Found in vLLM Semantic Router's Istio Integration(2 posts)→
More from Infra
- Short report claims 20%+ of Nvidia compute revenue (~$32B) flows to China via intermediaries — teortaxesTex · 2026-11-13
- Anthropic's Q3: revenue up 47% but compute costs jumped 77%, swinging to an operating loss — bigdata · 2026-11-13
- Anthropic launches self-hosted Claude Managed Agents in private beta for on-prem deployment — ClaudeDevs · 2026-11-13
- SpaceX commits $220M to Texas water infrastructure for its $24B AI supercomputing site — Polymarket · 2026-11-13
- Bittensor-powered GPU rental market Lium reports 79% ARR growth in 30 days — markjeffrey · 2026-11-13
- RTX 5090 called a future collectors' item as 'the last flagship under Jensen' — rachittshah · 2026-11-13