Vllm: server side request forgery (ssrf) in mediaconnector
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 0.11.0
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The load_from_url and load_from_url_async methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an attacker to coerce the vLLM server into making arbitrary requests to internal network resources.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- rhaiis-preview/vllm-cuda-rhel9
Version range not reported
- rhaiis/vllm-cuda-rhel9
Version range not reported
- rhaiis/vllm-rocm-rhel9
Version range not reported
- rhaiis/vllm-tpu-rhel9
Version range not reported
- rhelai1/bootc-amd-rhel9
Version range not reported
- rhelai1/bootc-aws-nvidia-rhel9
Version range not reported
- rhelai1/bootc-azure-amd-rhel9
Version range not reported
- rhelai1/bootc-azure-nvidia-rhel9
Version range not reported
- rhelai1/bootc-gcp-nvidia-rhel9
Version range not reported
- rhelai1/bootc-intel-rhel9
Version range not reported
- rhelai1/bootc-nvidia-rhel9
Version range not reported
- rhelai1/disk-image-nvidia-rhel9
Version range not reported
- rhelai1/docling-serve-rhel9
Version range not reported
- rhelai1/gemma-2-9b-it
Version range not reported
- rhelai1/gemma-2-9b-it-fp8
Version range not reported
- rhelai1/granite-3.1-8b-lab-v1
Version range not reported
- rhelai1/granite-3.1-8b-lab-v2.1
Version range not reported
- rhelai1/granite-3.1-8b-starter-v1
Version range not reported
- rhelai1/granite-3.1-8b-starter-v2.1
Version range not reported
- rhelai1/granite-7b-redhat-lab
Version range not reported
- rhelai1/granite-7b-starter
Version range not reported
- rhelai1/granite-8b-code-base
Version range not reported
- rhelai1/granite-8b-code-instruct
Version range not reported
- rhelai1/granite-8b-lab-v1
Version range not reported
- rhelai1/granite-8b-lab-v2-preview
Version range not reported
- rhelai1/granite-8b-starter-v1
Version range not reported
- rhelai1/instructlab-amd-rhel9
Version range not reported
- rhelai1/instructlab-intel-rhel9
Version range not reported
- rhelai1/instructlab-nvidia-rhel9
Version range not reported
- rhelai1/knowledge-adapter-v3
Version range not reported
- rhelai1/mixtral-8x7b-instruct-v0-1
Version range not reported
- rhelai1/modelcar-docling-layout
Version range not reported
- rhelai1/modelcar-docling-tableformer
Version range not reported
- rhelai1/modelcar-gemma-2-9b-it
Version range not reported
- rhelai1/modelcar-gemma-2-9b-it-fp8
Version range not reported
- rhelai1/modelcar-granite-3-1-8b-lab-v1
Version range not reported
- rhelai1/modelcar-granite-3-1-8b-lab-v2
Version range not reported
- rhelai1/modelcar-granite-3-1-8b-lab-v2-1
Version range not reported
- rhelai1/modelcar-granite-3-1-8b-starter-v1
Version range not reported
- rhelai1/modelcar-granite-3-1-8b-starter-v2
Version range not reported
- rhelai1/modelcar-granite-3-1-8b-starter-v2-1
Version range not reported
- rhelai1/modelcar-granite-7b-redhat-lab
Version range not reported
- rhelai1/modelcar-granite-7b-starter
Version range not reported
- rhelai1/modelcar-granite-8b-code-base
Version range not reported
- rhelai1/modelcar-granite-8b-code-instruct
Version range not reported
- rhelai1/modelcar-granite-8b-lab-v1
Version range not reported
- rhelai1/modelcar-granite-8b-lab-v2-preview
Version range not reported
- rhelai1/modelcar-granite-8b-starter-v1
Version range not reported
- rhelai1/modelcar-knowledge-adapter-v3
Version range not reported
- rhelai1/modelcar-mixtral-8x7b-instruct-v0-1
Version range not reported
- rhelai1/modelcar-prometheus-8x7b-v2-0
Version range not reported
- rhelai1/modelcar-skills-adapter-v3
Version range not reported
- rhelai1/modelcar-snowflake-arctic-embed-l-v2.0
Version range not reported
- rhelai1/pathservice-rhel9
Version range not reported
- rhelai1/prometheus-8x7b-v2-0
Version range not reported
- rhelai1/skills-adapter-v3
Version range not reported
- rhelai1/ui-rhel9
Version range not reported
- vllmPyPI
From 0.5.0 · fixed in 0.11.0