Vllm-project vulnerabilities
125 CVEs and advisories name Vllm-project as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-44223vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters
- CVE-2026-44222vLLM: Remote DoS via Special-Token Placeholders
- CVE-2026-34756vLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server
- CVE-2026-34755vLLM Affected by Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing
- CVE-2026-34753vLLM affected by Server-Side Request Forgery (SSRF) in `download_bytes_from_url `
- CVE-2026-34760vLLM: Downmix Implementation Differences as Attack Vectors Against Audio AI Models
- CVE-2026-27893vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out
- CVE-2026-25960SSRF Protection Bypass in vLLM
- CVE-2026-22778vLLM leaks a heap address when PIL throws an error
- CVE-2026-24779vLLM vulnerable to Server-Side Request Forgery (SSRF) in `MediaConnector`
- CVE-2026-22807vLLM affected by RCE via auto_map dynamic module loading during model initialization
- CVE-2026-22773vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions
- CVE-2025-66448vLLM vulnerable to remote code execution via transformers_utils/get_config
- CVE-2025-62372vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs
- CVE-2025-62426vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`
- CVE-2025-62164VLLM deserialization vulnerability leading to DoS and potential RCE
- CVE-2025-59425vLLM vulnerable to timing attack at bearer auth
- CVE-2025-48956vLLM API endpoints vulnerable to Denial of Service Attacks
- CVE-2025-48944vLLM Tool Schema allows DoS via Malformed pattern and type Fields
- CVE-2025-48943vLLM allows clients to crash the openai server with invalid regex
- CVE-2025-48942vLLM DOS: Remotely kill vllm over http with invalid JSON schema
- CVE-2025-48887vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`
- CVE-2025-46722vLLM has a Weakness in MultiModalHasher Image Hashing Implementation
- CVE-2025-46570vLLM’s Chunk-Based Prefix Caching Vulnerable to Potential Timing Side-Channel
- CVE-2025-47277vLLM Allows Remote Code Execution via PyNcclPipe Communication Service
- CVE-2025-30165Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration
- CVE-2025-32444vLLM Vulnerable to Remote Code Execution via Mooncake Integration
- CVE-2025-46560vLLM phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of service
- CVE-2025-30202Data exposure via ZeroMQ on multi-node vLLM deployment
- CVE-2024-11041Remote Code Execution in vllm-project/vllm