Vllm-project vulnerabilities
125 CVEs and advisories name Vllm-project as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-92220vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumption
- CVE-2026-90878vllm-project vLLM Jinja Template Rendering completions resource consumption
- CVE-2026-90713vllm-project vLLM tiktoken vocab File mod.rs new denial of service
- CVE-2026-90555vLLM before 0.28.0 Denial of Service via Audio Header
- CVE-2026-90554vLLM before 0.28.0 Denial of Service via audio extraction
- CVE-2026-90553vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processor
- CVE-2026-78684vLLM before 0.27.0 Denial of Service via DeepStream Backend
- CVE-2026-73560vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections
- CVE-2026-71486vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds
- CVE-2026-73559vLLM: Completion prompt lists fan out into unbounded engine requests
- CVE-2026-73558vLLM: Cross-User Data Leak Vulnerability
- CVE-2026-73557vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts
- CVE-2026-73556vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of CVE-2026-55574
- CVE-2026-73555vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages
- CVE-2026-55514vLLM denial of service via prompt embeds on M-RoPE models
- CVE-2026-55574vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends
- CVE-2026-54234vLLM: Remote DoS in vLLM via Invalid Recovered Token Reinjection
- CVE-2026-55646vLLM speech-to-text endpoints allocate full upload before enforcing the audio file-size limit
- CVE-2026-47155vLLM: Artifact Pin Decay in vLLM allows pinned deployments to load unpinned code, weights, and processors
- CVE-2026-41523vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution
- CVE-2026-54232vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile
- CVE-2026-54233vLLM: OOM Denial of Service via Audio Decompression Bomb
- CVE-2026-54236vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router
- CVE-2026-54235vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels
- CVE-2026-48746vLLM: OpenAI auth bypass
- CVE-2026-53923vLLM GGUF Kernels: int64_t to int truncation of tensor dimensions causes GPU buffer overflow
- CVE-2026-12491Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations
- CVE-2026-5497Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllm
- CVE-2026-4944Hardcoded trust_remote_code=True in vllm-project/vllm Bypasses User Security Control
- CVE-2026-9540vllm-project vllm OpenAI-compatible Serving Path denial of service