Vllm-project Vllm vulnerabilities

• vllm vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs CVE-2026-115918 Fix available 6.5 MediumOctober 26, 2026
• vllm vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server CVE-2026-115917 Fix available 3.4 LowOctober 26, 2026
• vllm vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS) CVE-2026-115916 Fix available 6.5 MediumOctober 26, 2026
• vllm vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE CVE-2026-115915 Fix available 8.1 HighOctober 26, 2026
• vllm vLLM DeepSeek-OCR image processing vulnerable to denial of service CVE-2026-115914 Fix available 6.5 MediumOctober 26, 2026
• vllm vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine CVE-2026-115913 Fix available 6.5 MediumOctober 26, 2026
• vllm vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled CVE-2026-115912 Fix available 7.5 HighOctober 26, 2026
• vllm vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool CVE-2026-115911 Fix available 6.5 MediumOctober 26, 2026
• vllm vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids CVE-2026-116181 7.1 HighOctober 25, 2026
• vllm vLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensors CVE-2026-116180 8.3 HighOctober 25, 2026
• vllm vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override CVE-2026-116179 8.7 HighOctober 25, 2026
• vllm vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders CVE-2026-116178 Fix available 8.2 HighOctober 25, 2026
• vllm vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass CVE-2026-116177 Fix available 8.7 HighOctober 25, 2026
• vllm vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector CVE-2026-116176 Fix available 8.8 HighOctober 25, 2026
• vllm vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions CVE-2026-116175 7.1 HighOctober 25, 2026
• vllm vLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate CVE-2026-116174 8.2 HighOctober 25, 2026
• vllm vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_ids CVE-2026-116173 Fix available 8.2 HighOctober 25, 2026
• vllm vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n CVE-2026-116172 8.2 HighOctober 25, 2026
• vllm vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs CVE-2026-114055 Fix available 8.7 HighOctober 21, 2026
• vllm vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keys CVE-2026-114054 Fix available 7.1 HighOctober 21, 2026
• vllm vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision CVE-2026-114053 Fix available 9.2 CriticalOctober 21, 2026
• vllm vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargs CVE-2026-114052 Fix available 8.7 HighOctober 21, 2026
• vllm vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generate CVE-2026-114051 7.1 HighOctober 21, 2026
• vllm vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUID CVE-2026-114050 Fix available 7.1 HighOctober 21, 2026
• vllm vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense CVE-2026-114049 6.3 MediumOctober 21, 2026
• vllm-project vllm vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Upload CVE-2026-109311 7.1 HighOctober 12, 2026
• vllm vllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of service CVE-2026-105922 Fix available 5.3 MediumOctober 6, 2026
• vllm-project vllm vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds CVE-2026-105775 5.3 MediumOctober 6, 2026
• vllm vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion CVE-2026-105760 Fix available 5.3 MediumOctober 5, 2026
• vllm vLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service) CVE-2026-105759 Fix available 5.9 MediumOctober 5, 2026
• vllm vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach CVE-2026-105758 Fix available 5.3 MediumOctober 5, 2026
• vllm vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites) CVE-2026-105757 Fix available 6.5 MediumOctober 5, 2026
• vllm vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service CVE-2026-105756 Fix available 6.5 MediumOctober 5, 2026
• vllm vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank` CVE-2026-105755 Fix available 4.2 MediumOctober 5, 2026
• vllm vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features CVE-2026-105754 Fix available 6.5 MediumOctober 5, 2026
• vllm vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core CVE-2026-105753 Fix available 6.5 MediumOctober 5, 2026
• vllm vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle CVE-2026-105752 Fix available 3.1 LowOctober 5, 2026
• vllm vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of service CVE-2026-103241 Fix available 6.9 MediumSeptember 30, 2026
• vllm vLLM before 0.29.0 Denial of Service via out-of-range stop_token_ids CVE-2026-100654 7.1 HighSeptember 26, 2026
• vllm vLLM 0.22.1 before 0.28.0 Incomplete Artifact Pin Propagation CVE-2026-100653 Fix available 8.3 HighSeptember 26, 2026
• vllm vLLM 0.22.0 through 0.23.0 Denial of Service via stop_token_ids CVE-2026-100652 Fix available 8.2 HighSeptember 26, 2026
• vllm vllm before 0.29.0 Denial of Service via Decoder Prompt Length Bypass CVE-2026-100651 7.1 HighSeptember 26, 2026
• vllm vLLM before 0.29.0 Resource Exhaustion via Unbounded Media Materialization CVE-2026-100650 Fix available 7.1 HighSeptember 26, 2026
• vllm vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclass CVE-2026-100649 6.3 MediumSeptember 26, 2026
• vllm vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding CVE-2026-100648 6.9 MediumSeptember 26, 2026
• vllm vLLM before 0.29.0 CPU Exhaustion via unbounded cache_salt CVE-2026-100647 6.9 MediumSeptember 26, 2026
• vllm vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision CVE-2026-94627 8.7 HighSeptember 21, 2026
• vllm vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_size CVE-2026-94626 Fix available 8.7 HighSeptember 21, 2026
• vllm vLLM through 0.29.0 Resource Exhaustion via Ownerless Mooncake Transfer Placeholders CVE-2026-94625 Fix available 6.9 MediumSeptember 21, 2026
• vllm vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading Sessions CVE-2026-94624 Fix available 8.7 HighSeptember 21, 2026
• Show olderLoading…