Vllm

CVEs (88)

• CVE-2026-57173MedSep 16, 2026
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.01

  vLLM is an inference and serving engine for large language models. Prior to 0.24.0, the input_audio handling path for /v1/chat/completions calls AudioMediaIO.load_bytes or AudioMediaIO.load_file without passing VLLM_MAX_AUDIO_DECODE_DURATION_S to the shared audio decoder. An…

• CVE-2026-90555MedSep 12, 2026
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.00

  vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks. Attackers can submit forged FLAC headers with inflated sample rates to trigger excessive memory allocation and crash…

• CVE-2026-73560MedAug 17, 2026
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.00

  vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the MiMoV2OmniMultiModalProcessor in vllm/transformers_utils/processors/mimo_v2_omni.py passes attacker-controlled image and audio strings through _fetch_image, requests.get, and Image.open…

• CVE-2026-73559MedAug 13, 2026
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.00

  vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.26.0, the /v1/completions CompletionRequest.prompt field in vllm/entrypoints/openai/completion/protocol.py accepts an unbounded list[str] or list[list[int]], prompt_to_seq() in…

• CVE-2026-55514MedJul 6, 2026
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.01

  vLLM is a library for LLM inference and serving. From 0.12.0 to before 0.24.0, sending a pure prompt embeds payload in a /v1/completions request with a model using M-RoPE causes EngineCore to fail an assertion and fatally crash, shutting down the entire server application. Any…

• CVE-2026-55646MedJul 6, 2026
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.01

  vLLM is an inference and serving engine for large language models. From 0.22.0 to 0.23.0, the /v1/audio/transcriptions and /v1/audio/translations routes call request.file.read() to fully materialize an uploaded audio file into memory before vLLM checks the documented…

• CVE-2026-54235MedJun 22, 2026
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.00

  vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, ll temperature validation gates use comparison operators (<, >), which silently evaluate to False for NaN and for positive Infinity in Python's IEEE 754 float semantics. Both values…

• CVE-2026-54233MedJun 22, 2026
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.00

  vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, vLLM's /v1/audio/transcriptions endpoint limits compressed upload size but not decoded PCM output. A 25MB OPUS file expands to ~14.9GB of float32 PCM at decode time. This vulnerability…

• CVE-2026-47155MedJun 22, 2026
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.00

  vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, vLLM's revision pinning controls do not consistently apply to all artifacts loaded for a model. A deployment that supplies --revision or --code-revision can still load dynamic code, GGUF…

• CVE-2026-44223MedMay 12, 2026
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.00

  vLLM is an inference and serving engine for large language models (LLMs). From 0.18.0 to before 0.20.0, the extract_hidden_states speculative decoding proposer in vLLM returns a tensor with an incorrect shape after the first decode step, causing a RuntimeError that crashes the…

• CVE-2026-44222MedMay 12, 2026
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.00

  vLLM is an inference and serving engine for large language models (LLMs). From 0.6.1 to before 0.20.0, there is a a Token Injection vulnerability in vLLM’s multimodal processing. Unauthenticated, text-only prompts that spell special tokens are interpreted as control. Image and…

• CVE-2026-34756MedApr 6, 2026
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.00

  vLLM is an inference and serving engine for large language models (LLMs). From 0.1.0 to before 0.19.0, a Denial of Service vulnerability exists in the vLLM OpenAI-compatible API server. Due to the lack of an upper bound validation on the n parameter in the ChatCompletionRequest…

• CVE-2026-34755MedApr 6, 2026
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.00

  vLLM is an inference and serving engine for large language models (LLMs). From 0.7.0 to before 0.19.0, the VideoMediaIO.load_base64() method at vllm/multimodal/media/video.py splits video/jpeg data URLs by comma to extract individual JPEG frames, but does not enforce a frame…

• CVE-2026-22773MedJan 10, 2026
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.00

  vLLM is an inference and serving engine for large language models (LLMs). In versions from 0.6.4 to before 0.12.0, users can crash the vLLM engine serving multimodal models that use the Idefics3 vision model implementation by sending a specially crafted 1x1 pixel image. This…

• CVE-2025-62426MedNov 21, 2025
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.00

  vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, the /v1/chat/completions and /tokenize endpoints allow a chat_template_kwargs request parameter that is used in the code before it is properly validated against the…

• CVE-2025-62372MedNov 21, 2025
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.00

  vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, users can crash the vLLM engine serving multimodal models by passing multimodal embedding inputs with correct ndim but incorrect shape (e.g. hidden dimension is wrong),…

• CVE-2025-48944MedMay 30, 2025
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.01

  vLLM is an inference and serving engine for large language models (LLMs). In version 0.8.0 up to but excluding 0.9.0, the vLLM backend used with the /v1/chat/completions OpenAPI endpoint fails to validate unexpected or malformed input in the "pattern" and "type" fields when the…

• CVE-2025-48943MedMay 30, 2025
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.00

  vLLM is an inference and serving engine for large language models (LLMs). Version 0.8.0 up to but excluding 0.9.0 have a Denial of Service (ReDoS) that causes the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar…

• CVE-2025-48942MedMay 30, 2025
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.01

  vLLM is an inference and serving engine for large language models (LLMs). In versions 0.8.0 up to but excluding 0.9.0, hitting the /v1/completions API with a invalid json_schema as a Guided Param kills the vllm server. This vulnerability is similar…

• CVE-2025-48887MedMay 30, 2025
  Vllm

  Vllm
  risk 0.35cvss 6.5epss 0.01

  vLLM, an inference and serving engine for large language models (LLMs), has a Regular Expression Denial of Service (ReDoS) vulnerability in the file `vllm/entrypoints/openai/tool_parsers/pythonic_tool_parser.py` of versions 0.6.4 up to but excluding 0.9.0. The root cause is the…