[Misc] Add security warning for development mode endpoints (#20508)

reidliu41 · web-flow · commit 7e9087049193 · 2025-07-04T20:52:13.000-07:00
Signed-off-by: reidliu41 &lt;reid201711@gmail.com&gt;
diff --git a/vllm/entrypoints/openai/api_server.py b/vllm/entrypoints/openai/api_server.py
@@ -910,6 +910,8 @@ async def do_rerank_v2(request: RerankRequest, raw_request: Request):
 }
 
 if envs.VLLM_SERVER_DEV_MODE:
+    logger.warning("SECURITY WARNING: Development endpoints are enabled! "
+                   "This should NOT be used in production!")
 
     @router.get("/server_info")
     async def show_server_info(raw_request: Request):

Original file line number	Diff line number	Diff line change
`@@ -910,6 +910,8 @@ async def do_rerank_v2(request: RerankRequest, raw_request: Request):`
`910`	`910`	`}`
`911`	`911`
`912`	`912`	`if envs.VLLM_SERVER_DEV_MODE:`
	`913`	`+ logger.warning("SECURITY WARNING: Development endpoints are enabled! "`
	`914`	`+ "This should NOT be used in production!")`
`913`	`915`
`914`	`916`	`@router.get("/server_info")`
`915`	`917`	`async def show_server_info(raw_request: Request):`