CVE-2026-15574: A flaw was found in the vllm-orchestrator-gateway component. The system's production binary logs all incoming authorizat

A flaw in the vllm-orchestrator-gateway component (a system that manages requests to AI language models) logs sensitive information like authorization headers (credentials that prove who you are), bearer tokens (temporary access passwords), and full chat conversations to persistent logs (files stored on disk). Any user with access to the logging system can read this data, which may include personally identifiable information (PII, such as names or account details) and secrets, allowing attackers to steal credentials and private conversation content.