vLLM — Vulnerabilities & Security Advisories 1

Browse all 1 CVE security advisories affecting vLLM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by vLLM: AIBrix

[Bug]: KV block corruption in base scheduler, Non-deterministic output at temperature=0 without prefix caching · Issue #

Zero recycled KV blocks for FullAttention models (#39146) · AjAnubolu/vllm@1ad6786 · GitHub

HighCVE-2026-347502026-04-07

Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing · Advisory · vllm-project/vllm · GitHub

HighGHSA-xx73-m8j2-vqcf2026-04-07

Server-Side Request Forgery (SSRF) in `download_bytes_from_url ` · Advisory · vllm-project/vllm · GitHub

OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server · Advisory · vllm-project/vllm · GitHub

Critical2026-04-03

Release v0.18.0 · vllm-project/vllm · GitHub

CriticalCVE-2026-227782026-02-03

vLLM RCE In Video Processing · Advisory · vllm-project/vllm · GitHub

Medium2026-01-27

[Model] Handle `trust_remote_code` for transformers backend (#32194) · vllm-project/vllm@78d13ea · GitHub

MediumGHSA-grg2-63fw-f2qr2026-01-20

DoS in Idefics3 vision models via image payload with ambiguous dimensions · Advisory · vllm-project/vllm · GitHub

HighCVE-2025-621642025-11-21

VLLM prompt_embeds deserialization allows DoS and potential RCE · Advisory · vllm-project/vllm · GitHub

MediumCVE-2025-623722025-11-21

DoS with incorrect shape of multimodal embedding inputs · Advisory · vllm-project/vllm · GitHub

HighCVE-2025-624262025-11-21

DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs` · Advisory · vllm-p

Showing up to 20 recent security advisories. View all →

This page lists every published CVE security advisory associated with vLLM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.