vLLM
Filed as: vllm, vLLM AIBrix, vLLM Hardware Plugin for Intel Gaudi, vllm-metal
Newest record 2026-11-13 · 143 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 1
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
- closed5.5vLLM CVE-2026-103241: Denial of service vulnerability in vLLM
Exploited · since 30 Sep 2026 · CVE-2026-103241
AI
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 146
- closed6.9vLLM CVE-2026-126395: vLLM information disclosure vulnerability in sanitize_message()
Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126395
AI - closed7.1vLLM CVE-2026-126399: vLLM resource exhaustion vulnerability via video frame limits bypass
Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126399
AI - closed8.2vLLM CVE-2026-126398: vLLM reachable assertion vulnerability in GPUModelRunner._init_xdrope_positions
Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126398
AI - closed6.9vLLM CVE-2026-126394: vLLM resource exhaustion vulnerability in OpenCVDynamicOpenPanguVideoBackend
Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126394
AI - closed8.7vLLM CVE-2026-126397: vLLM quadratic CPU work vulnerability in Cohere2 Vision multimodal preprocessing
Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126397
AI - closed6.9vLLM CVE-2026-126396: vLLM resource exhaustion vulnerability in MiniMax M3 VL video processor
Disclosed · Patched · since 13 Nov 2026 · CVE-2026-126396
AI - closed7.5vLLM CVE-2026-115912: vLLM shared-memory multimodal remote code execution
Disclosed · Patched · since 26 Oct 2026 · updated 28 Oct 2026 · CVE-2026-115912
AI - closed6.5vLLM CVE-2026-115916: vLLM tokenizer off-by-one engine termination
Disclosed · Patched · since 26 Oct 2026 · updated 28 Oct 2026 · CVE-2026-115916
AI - closed6.5vLLM CVE-2026-115918: vLLM chat template parsing resource exhaustion
Disclosed · Patched · since 26 Oct 2026 · updated 28 Oct 2026 · CVE-2026-115918
AI - closed6.5vLLM CVE-2026-115914: vLLM multimodal OCR path denial of service
Disclosed · Patched · since 26 Oct 2026 · updated 28 Oct 2026 · CVE-2026-115914
AI - closed8.1vLLM CVE-2026-115915: vLLM insecure image parsing command execution vulnerability
Disclosed · Patched · since 26 Oct 2026 · updated 28 Oct 2026 · CVE-2026-115915
AI - closed3.4vLLM CVE-2026-115917: vLLM permissive CORS configuration vulnerability
Disclosed · Patched · since 26 Oct 2026 · updated 28 Oct 2026 · CVE-2026-115917
AI - closed6.5vLLM CVE-2026-115913: vLLM Phi-4 multimodal audio attention out-of-memory flaw
Disclosed · Patched · since 26 Oct 2026 · updated 28 Oct 2026 · CVE-2026-115913
AI - closed6.5vLLM CVE-2026-115911: vLLM chat template denial of service vulnerability
Disclosed · Patched · since 26 Oct 2026 · updated 28 Oct 2026 · CVE-2026-115911
AI - closed7.1vLLM CVE-2026-116181: vLLM input validation flaw permits engine crashes via out-of-vocabulary tokens
Disclosed · since 25 Oct 2026 · CVE-2026-116181
AI - closed8.7vLLM CVE-2026-116179: vLLM video frame-count cap bypass causes resource exhaustion and crash
Disclosed · since 25 Oct 2026 · CVE-2026-116179
AI - closed8.8vLLM CVE-2026-116176: vLLM server-side request forgery leads to NCCL unique_id and KV-cache leakage
Disclosed · since 25 Oct 2026 · CVE-2026-116176
AI - closed8.2vLLM CVE-2026-116172: vLLM Rust gRPC converter allows max_logprobs limit bypass and engine crash
Disclosed · since 25 Oct 2026 · CVE-2026-116172
AI - closed7.1vLLM CVE-2026-116175: vLLM audio processing path vulnerable to decompression bomb memory exhaustion
Disclosed · since 25 Oct 2026 · CVE-2026-116175
AI - closed8.7vLLM CVE-2026-116177: vLLM uncontrolled resource consumption via decompression bomb
Disclosed · since 25 Oct 2026 · CVE-2026-116177
AI - closed8.2vLLM CVE-2026-116174: vLLM improper input validation in Rust gRPC service
Disclosed · since 25 Oct 2026 · CVE-2026-116174
AI - closed8.2vLLM CVE-2026-116173: vLLM denial of service via logprob token limits bypass
Disclosed · since 25 Oct 2026 · CVE-2026-116173
AI - closed8.2vLLM CVE-2026-116178: vLLM denial of service via inconsistent multimodal metadata
Disclosed · since 25 Oct 2026 · CVE-2026-116178
AI - closed8.3vLLM CVE-2026-116180: vLLM denial of service vulnerability in tensor allocation
Disclosed · since 25 Oct 2026 · CVE-2026-116180
AI - closedvLLM vLLM Denial of Service through Multimodal UUID Cache Desynchronization
Disclosed · since 21 Oct 2026
AI - closedvLLM vLLM Denial of Service via Unvalidated mm_processor_kwargs
Disclosed · since 21 Oct 2026
AI - closed6.5vLLM CVE-2026-114050: vLLM multimodal UUID cache identity flaw leads to engine crash
Disclosed · since 21 Oct 2026 · updated 23 Oct 2026 · CVE-2026-114050
AI - closed7.1vLLM CVE-2026-114054: vLLM cache aliasing vulnerability exposes processed media and KV state
Disclosed · since 21 Oct 2026 · CVE-2026-114054
AI - closed7.5vLLM CVE-2026-114051: vLLM input validation check omission causes denial of service
Disclosed · since 21 Oct 2026 · CVE-2026-114051
AI - closed6.3vLLM CVE-2026-114049: vLLM cross-request mask leak vulnerability
Disclosed · since 21 Oct 2026 · CVE-2026-114049
AI - closed7.5vLLM CVE-2026-114055: vLLM Uncontrolled Resource Consumption via Multimodal Parameters
Disclosed · since 21 Oct 2026 · updated 23 Oct 2026 · CVE-2026-114055
AI - closed8.7vLLM CVE-2026-114052: vLLM MOSS-Audio Model Serving Memory Exhaustion Vulnerability
Disclosed · since 21 Oct 2026 · CVE-2026-114052
AI - closed9.2vLLM CVE-2026-114053: vLLM Vulnerable to Remote Code Execution via mm_processor_kwargs.code_revision
Disclosed · Patched · since 21 Oct 2026 · updated 27 Oct 2026 · CVE-2026-114053
AI - closed7.1vLLM CVE-2026-109311: vLLM audio transcription endpoint heap overflow vulnerability
Disclosed · since 12 Oct 2026 · CVE-2026-109311
AI - closed4.3vLLM CVE-2026-105775: Out-of-bounds read vulnerability in vLLM completions request handler
Disclosed · since 6 Oct 2026 · CVE-2026-105775
AI - closed4.3vLLM Denial of Service Vulnerability in vLLM Penalty Handler
Disclosed · since 6 Oct 2026 · CVE-2026-105922
AI - closed5.3vLLM vLLM Denial of Service via Unbounded Video Sampler Frames
Disclosed · since 5 Oct 2026 · CVE-2026-105758
AI - closed3.1vLLM vLLM tool continuations drop cache_salt to restore prefix-cache oracle
Disclosed · since 5 Oct 2026 · updated 6 Oct 2026 · CVE-2026-105752
AI - closed5.3vLLM vLLM GLMGA video sampling permits CPU and memory exhaustion
Disclosed · since 5 Oct 2026 · CVE-2026-105760
AI - closed4.2vLLM vLLM flash late-interaction scoring permits cross-request integrity break
Disclosed · since 5 Oct 2026 · CVE-2026-105755
AI - closed6.5vLLM vLLM loose cache_salt validation causes engine crash on LMCache-MP
Disclosed · since 5 Oct 2026 · CVE-2026-105756
AI - closed6.5vLLM vLLM structured-output requests cause engine-fatal denial of service
Disclosed · since 5 Oct 2026 · CVE-2026-105757
AI - closed7.5vLLM CVE-2026-105759: vLLM Prometheus Metrics Memory Exhaustion Vulnerability
Disclosed · since 5 Oct 2026 · CVE-2026-105759
AI - closed6.5vLLM CVE-2026-105753: vLLM Multimodal IPC Cache Desync Denial of Service
Disclosed · since 5 Oct 2026 · updated 6 Oct 2026 · CVE-2026-105753
AI - closed6.5vLLM CVE-2026-105754: vLLM disaggregated transport trusts caller-supplied features
Disclosed · since 5 Oct 2026 · CVE-2026-105754
AI - closed6.9vLLM vLLM Audio Size Enforcement Bypass Permits Resource Exhaustion
Disclosed · since 26 Sep 2026 · CVE-2026-100648
AI - closed6.3vLLM vLLM Decoder Allocation Resource Limit Bypass Causes GPU Memory Exhaustion
Disclosed · since 26 Sep 2026 · CVE-2026-100649
AI - closed8.2vLLM vLLM Stop Token ID Boundary Validation Flaw Causes Service Crash
Disclosed · since 26 Sep 2026 · CVE-2026-100652
AI - closed6.9vLLM CVE-2026-100647: vLLM denial-of-service vulnerability in cache_salt parameter
Disclosed · since 26 Sep 2026 · CVE-2026-100647
AI - closed8.3vLLM CVE-2026-100653: vLLM revision pin failure during Hugging Face artifact loads
Disclosed · since 26 Sep 2026 · CVE-2026-100653
AI - closed7.1vLLM CVE-2026-100651: vLLM omits prompt-length validation on disaggregated endpoint
Disclosed · since 26 Sep 2026 · CVE-2026-100651
AI - closed7.1vLLM CVE-2026-100650: vLLM materializes remote media before size enforcement
Disclosed · since 26 Sep 2026 · CVE-2026-100650
AI - closed7.1vLLM CVE-2026-100654: vLLM flawed stop_token_ids validation causes CUDA error
Disclosed · since 26 Sep 2026 · CVE-2026-100654
AI - closed8.7vLLM CVE-2026-94626: vLLM Memory Exhaustion via Unvalidated tp_size Parameter
Disclosed · since 21 Sep 2026 · CVE-2026-94626
AI - closed6.9vLLM CVE-2026-94625: vLLM Resource Exhaustion in MooncakeConnector Transfer Placeholders
Disclosed · since 21 Sep 2026 · CVE-2026-94625
AI - closed8.7vLLM CVE-2026-94622: vLLM Denial of Service in NIXL Connector Metadata Handling
Disclosed · since 21 Sep 2026 · CVE-2026-94622
AI - closed8.7vLLM vLLM Mooncake connector GPU memory exhaustion vulnerability
Disclosed · since 21 Sep 2026 · CVE-2026-94627
AI - closed8.7vLLM vLLM P2P KV offloading denial of service vulnerability
Disclosed · Patched · since 21 Sep 2026 · updated 27 Oct 2026 · CVE-2026-94624
AI - closed8.7vLLM vLLM NIXL connector denial of service vulnerability
Disclosed · since 21 Sep 2026 · CVE-2026-94623
AI - closed3.1vLLM vLLM bad_words token index validation flaw in SamplingParams
Disclosed · since 19 Sep 2026 · CVE-2026-93989
AI - closed6.3vLLM CVE-2026-93840: Validation flaw in vLLM allowed_token_ids handling
Disclosed · since 18 Sep 2026 · CVE-2026-93840
AI - closed8.7vLLM CVE-2026-93592: Input validation flaw in vLLM embeddings and pooling endpoints
Disclosed · since 18 Sep 2026 · CVE-2026-93592
AI - closed6.3vLLM CVE-2026-93841: Memory corruption in vLLM Triton bincount kernel
Disclosed · since 18 Sep 2026 · CVE-2026-93841
AI - closed8.7vLLM CVE-2026-93436: Memory exhaustion vulnerability in vLLM inference server
Disclosed · since 17 Sep 2026 · CVE-2026-93436
AI - closed6.9vLLM vLLM MoRIIO Acknowledgement Handler Resource Consumption Vulnerability
Disclosed · since 16 Sep 2026 · CVE-2026-92220
AI - closed5.3vLLM CVE-2026-92365: Algorithmic complexity vulnerability in vLLM
Disclosed · since 16 Sep 2026 · CVE-2026-92365
AI - closed6.5vLLM CVE-2026-57173: vLLM audio input handling out-of-memory flaw
Disclosed · since 16 Sep 2026 · CVE-2026-57173
AI - closed6.5vLLM CVE-2026-69147: vLLM video backend GPU memory allocation flaw
Disclosed · since 16 Sep 2026 · updated 17 Sep 2026 · CVE-2026-69147
AI - closed4.3vLLM CVE-2026-90878: vLLM Jinja Template Rendering Resource Consumption Vulnerability
Disclosed · since 15 Sep 2026 · CVE-2026-90878
AI - closed3.3vLLM CVE-2026-90713: Denial of service vulnerability in vLLM
Disclosed · since 14 Sep 2026 · CVE-2026-90713
AI - closed7.1vLLM CVE-2026-90555: vLLM Audio Transcription Memory Exhaustion
Disclosed · since 12 Sep 2026 · CVE-2026-90555
AI - closed8.5vLLM CVE-2026-90553: vLLM Remote Code Execution Vulnerability
Disclosed · since 12 Sep 2026 · CVE-2026-90553
AI - closed6.9vLLM CVE-2026-90554: vLLM audio decode size limit vulnerability
Disclosed · since 12 Sep 2026 · CVE-2026-90554
AI - closed7.5vLLM CVE-2026-37237: vLLM Unbounded Media Fetching Memory Exhaustion
Disclosed · since 28 Aug 2026 · CVE-2026-37237
AI - closed6.9vLLM CVE-2026-78684: vLLM DeepStream Decode Path Resource Control Bypass
Disclosed · since 25 Aug 2026 · CVE-2026-78684
AI - closed6.5vLLM CVE-2026-73560: vLLM multimodal processor vulnerable to arbitrary file reads and SSRF
Disclosed · since 17 Aug 2026 · updated 8 Sep 2026 · CVE-2026-73560
AI - closed4.3vLLM CVE-2026-71486: vLLM derender endpoints vulnerable to resource exhaustion
Disclosed · since 17 Aug 2026 · updated 4 Sep 2026 · CVE-2026-71486
AI - closed5.3vLLM CVE-2026-73558: vLLM data leakage vulnerability in activation kernels
Disclosed · since 13 Aug 2026 · updated 8 Sep 2026 · CVE-2026-73558
AI - closed5.3vLLM CVE-2026-73556: vLLM denial of service via regex structured output
Disclosed · since 13 Aug 2026 · updated 4 Sep 2026 · CVE-2026-73556
AI - closed6.3vLLM CVE-2026-73557: vLLM prompt embed check bypass vulnerability
Disclosed · since 13 Aug 2026 · updated 4 Sep 2026 · CVE-2026-73557
AI - closed6.5vLLM CVE-2026-73559: Denial of service vulnerability in vLLM completion prompt preprocessing
Disclosed · since 13 Aug 2026 · CVE-2026-73559
AI - closed5.3vLLM CVE-2026-73555: Information disclosure vulnerability in vLLM request validation handling
Disclosed · since 13 Aug 2026 · updated 4 Sep 2026 · CVE-2026-73555
AI - closed6.8vLLM CVE-2026-27765: Input validation flaw in vLLM Intel Gaudi plugin allows denial of service
Disclosed · since 11 Aug 2026 · CVE-2026-27765
AI - closed7.1vLLM vLLM denial of service via prompt embeds on M-RoPE models
Disclosed · since 20 Jul 2026 · updated 20 Jul 2026 · CVE-2026-55514
AI - closed8.7vLLM vLLM ReDoS vulnerability in structured outputs regex compilation
Disclosed · since 17 Jul 2026 · updated 17 Jul 2026 · CVE-2026-55574
AI - closed6.5vLLM CVE-2026-55646: vLLM speech-to-text enforces size limit after full file read
Disclosed · since 17 Jul 2026 · updated 17 Jul 2026 · CVE-2026-55646
AI - closed7.5vLLM CVE-2026-54234: vLLM remote denial of service via invalid recovered token reinjection
Disclosed · since 17 Jul 2026 · updated 17 Jul 2026 · CVE-2026-54234
AI - closed8.8vLLM CVE-2026-54232: Dependency confusion flaw in vLLM Dockerfile
Disclosed · since 22 Jun 2026 · CVE-2026-54232
AI - closed7.5vLLM CVE-2025-71379: vLLM regular expression denial of service vulnerabilities
Disclosed · since 20 Jun 2026 · CVE-2025-71379
AI - closed4.8vLLM CVE-2026-12491: vLLM flawed image metadata handling leads to input distortion
Disclosed · since 17 Jun 2026 · CVE-2026-12491
AI - closed5.3vLLM CVE-2026-54236: vLLM Incomplete Fix Leaks PIL Repr Addresses
Disclosed · since 17 Jun 2026 · updated 22 Jun 2026 · CVE-2026-54236
AI - closed6.9vLLM CVE-2026-54235: vLLM temperature validation bypass for NaN and Infinity values
Disclosed · since 17 Jun 2026 · updated 22 Jun 2026 · CVE-2026-54235
AI - closed7.5vLLM CVE-2026-53923: vLLM GGUF Dequantization Kernel Information Disclosure
Disclosed · since 17 Jun 2026 · updated 22 Jun 2026 · CVE-2026-53923
AI - closed6.5vLLM CVE-2026-54233: vLLM OOM Denial of Service via Audio Decompression
Disclosed · since 17 Jun 2026 · updated 22 Jun 2026 · CVE-2026-54233
AI - closed9.1vLLM CVE-2026-48746: vLLM OpenAI API Authentication Bypass
Disclosed · since 16 Jun 2026 · updated 22 Jun 2026 · CVE-2026-48746
AI - closed7.5vLLM CVE-2026-41523: vLLM Security Check Bypass via assert Statement
Disclosed · since 16 Jun 2026 · updated 22 Jun 2026 · CVE-2026-41523
AI - closed7.5vLLM CVE-2026-5497: vLLM vulnerable to OOM Denial of Service
Disclosed · since 11 Jun 2026 · CVE-2026-5497
AI - closed6.5vLLM CVE-2026-47155: vLLM artifact pin decay allows loading unpinned code and weights
Disclosed · since 10 Jun 2026 · updated 22 Jun 2026 · CVE-2026-47155
AI - closed8.8vLLM vLLM Hardcoded Trust Remote Code Parameter Leads to RCE
Disclosed · since 28 May 2026 · CVE-2026-4944
AI - closed5.5vLLM vLLM vulnerable to denial of service via OpenAI-compatible serving path
Disclosed · since 26 May 2026 · CVE-2026-9540
AI - closed8.8vLLM CVE-2026-5817: Docker Model Runner vllm-metal arbitrary code execution vulnerability
Disclosed · since 22 May 2026 · CVE-2026-5817
AI - closed6.5vLLM vLLM speculative decoding crashes server via penalty parameters
Disclosed · since 6 May 2026 · updated 12 May 2026 · CVE-2026-44223
AI - closed6.5vLLM CVE-2026-44222: vLLM vulnerable to remote DoS via special-token placeholders
Disclosed · since 5 May 2026 · updated 12 May 2026 · CVE-2026-44222
AI - closed5.6vLLM CVE-2026-7141: vLLM Uninitialized Resource Vulnerability
Disclosed · since 27 Apr 2026 · CVE-2026-7141
AI - closed6.5vLLM CVE-2026-34755: vLLM Denial of Service via Unbounded Base64 Frames
Disclosed · since 3 Apr 2026 · updated 6 Apr 2026 · CVE-2026-34755
AI - closed5.4vLLM CVE-2026-34753: vLLM Server-Side Request Forgery in batch runner
Disclosed · since 3 Apr 2026 · updated 6 Apr 2026 · CVE-2026-34753
AI - closed6.5vLLM CVE-2026-34756: vLLM Unauthenticated Denial of Service via Parameter
Disclosed · since 3 Apr 2026 · updated 6 Apr 2026 · CVE-2026-34756
AI - closed5.9vLLM vLLM audio downmixing differential enables moderation bypass
Disclosed · since 17 Jul 2026 · updated 17 Jul 2026 · CVE-2026-34760
AI - closed8.8vLLM CVE-2026-27893: vLLM Hardcoded Trust Override Enables RCE
Disclosed · since 27 Mar 2026 · CVE-2026-27893
AI - closed5.4vLLM CVE-2026-25960: vLLM has SSRF Protection Bypass
Disclosed · since 9 Mar 2026 · CVE-2026-25960
AI - closed9.8vLLM CVE-2026-22778: vLLM remote code execution via video processing
Disclosed · since 2 Feb 2026 · CVE-2026-22778
AI - closed7.1vLLM CVE-2026-24779: vLLM MediaConnector vulnerable to Server-Side Request Forgery
Disclosed · since 28 Jan 2026 · updated 28 Jan 2026 · CVE-2026-24779
AI - closed8.8vLLM CVE-2026-22807: vLLM RCE via auto_map Dynamic Module Loading
Disclosed · since 21 Jan 2026 · CVE-2026-22807
AI - closed6.5vLLM CVE-2026-22773: vLLM Denial of Service via Idefics3 Vision Model Payload
Disclosed · since 13 Jan 2026 · updated 13 Jan 2026 · CVE-2026-22773
AI - closed8.8vLLM CVE-2026-56340: vLLM introduces enhanced protection for sparse tensor validation DoS
Disclosed · since 8 Jan 2026 · updated 20 Jun 2026 · CVE-2026-56340
AI - closed7.1vLLM CVE-2025-66448: vLLM remote code execution vulnerability in config loading
Disclosed · since 2 Dec 2025 · updated 2 Dec 2025 · CVE-2025-66448
AI - closed8.8vLLM CVE-2025-62164: vLLM memory corruption via unvalidated prompt-embedding tensors
Disclosed · since 20 Nov 2025 · updated 21 Nov 2025 · CVE-2025-62164
AI - closed6.5vLLM CVE-2025-62426: vLLM Vulnerable to DoS via Chat Completion Request Parameters
Disclosed · since 20 Nov 2025 · updated 21 Nov 2025 · CVE-2025-62426
AI - closed8.3vLLM CVE-2025-62372: vLLM vulnerable to denial of service via multimodal embedding inputs
Disclosed · since 20 Nov 2025 · updated 21 Nov 2025 · CVE-2025-62372
AI - closed6.5vLLM CVE-2025-61620: vLLM resource exhaustion via malicious Jinja template
Disclosed · since 7 Oct 2025 · CVE-2025-61620
AI - closed7.5vLLM CVE-2025-59425: vLLM vulnerable to timing attack at bearer auth
Disclosed · since 7 Oct 2025 · CVE-2025-59425
AI - closed7.1vLLM CVE-2025-6242: vLLM vulnerable to SSRF through MediaConnector
Disclosed · since 7 Oct 2025 · CVE-2025-6242
AI - closed7.5vLLM CVE-2025-48956: vLLM API Denial of Service via Large HTTP Headers
Disclosed · since 21 Aug 2025 · CVE-2025-48956
AI - closed8.8vLLM CVE-2025-9141: vLLM RCE Vulnerability in Qwen3-Coder Tool Parser
Disclosed · since 21 Aug 2025 · CVE-2025-9141
AI - closed6.5vLLM CVE-2025-48943: vLLM Denial of Service via Invalid Regex Output
Disclosed · since 28 May 2025 · updated 30 May 2025 · CVE-2025-48943
AI - closed6.5vLLM CVE-2025-48942: vLLM Denial of Service via Invalid JSON Schema
Disclosed · since 28 May 2025 · updated 30 May 2025 · CVE-2025-48942
AI - closed6.5vLLM CVE-2025-48887: vLLM ReDoS Vulnerability in pythonic_tool_parser
Disclosed · since 28 May 2025 · updated 30 May 2025 · CVE-2025-48887
AI - closedvLLM vLLM Regular Expression Denial of Service
Disclosed · since 28 May 2025
AI - closed4.2vLLM CVE-2025-46722: vLLM MultiModalHasher Image Hashing Weakness
Disclosed · since 28 May 2025 · updated 29 May 2025 · CVE-2025-46722
AI - closed2.6vLLM CVE-2025-46570: Timing Side-Channel in vLLM Prefix Caching
Disclosed · since 28 May 2025 · updated 29 May 2025 · CVE-2025-46570
AI - closed6.5vLLM CVE-2025-48944: vLLM Tool Schema Allows DoS via Malformed Fields
Disclosed · since 28 May 2025 · updated 30 May 2025 · CVE-2025-48944
AI - closed9.8vLLM CVE-2025-47277: vLLM Remote Code Execution via PyNcclPipe
Disclosed · since 20 May 2025 · CVE-2025-47277
AI - closed8.0vLLM CVE-2025-30165: Remote Code Execution in vLLM Multi-Node Cluster Configuration
Disclosed · since 6 May 2025 · CVE-2025-30165
AI - closed6.5vLLM CVE-2025-46560: vLLM vulnerable to denial of service via quadratic time complexity
Disclosed · since 29 Apr 2025 · updated 30 Apr 2025 · CVE-2025-46560
AI - closed10.0vLLM CVE-2025-32444: vLLM Remote Code Execution via Mooncake Integration
Disclosed · since 29 Apr 2025 · updated 30 Apr 2025 · CVE-2025-32444
AI - closed7.5vLLM CVE-2025-30202: Data Exposure via ZeroMQ in Multi-Node vLLM Deployment
Disclosed · since 29 Apr 2025 · updated 30 Apr 2025 · CVE-2025-30202
AI - closedvLLM vLLM Vulnerable to Denial of Service by Abusing XGrammar Cache
Disclosed · since 15 Apr 2025
AI - closed9.8vLLM CVE-2024-11041: vLLM Deserialization of Untrusted Data vulnerability
Disclosed · since 20 Mar 2025 · CVE-2024-11041
AI - closed9.8vLLM CVE-2024-9053: vLLM Pickle Deserialization Remote Code Execution
Disclosed · since 20 Mar 2025 · CVE-2024-9053
AI - closed9.8vLLM CVE-2024-9052: vLLM Deserialization Vulnerability in GroupCoordinator
Disclosed · since 20 Mar 2025 · CVE-2024-9052
AI - closed6.5vLLM CVE-2025-29770: vLLM denial of service via outlines unbounded cache
Disclosed · since 19 Mar 2025 · CVE-2025-29770
AI - closed9.0vLLM CVE-2025-29783: vLLM allows remote code execution via Mooncake integration
Disclosed · since 19 Mar 2025 · CVE-2025-29783
AI - closed2.6vLLM CVE-2025-1953: Insufficiently random values in vLLM AIBrix prefix caching
Disclosed · since 4 Mar 2025 · CVE-2025-1953
AI - closed2.6vLLM CVE-2025-25183: vLLM vulnerable to hash collisions in prefix cache
Disclosed · since 6 Feb 2025 · updated 7 Feb 2025 · CVE-2025-25183
AI - closed8.7vLLM CVE-2024-8768: vLLM denial of service vulnerability
Disclosed · since 17 Sep 2024 · CVE-2024-8768
AI - closed6.9vLLM CVE-2024-8939: vLLM Denial of Service via best_of parameter
Disclosed · since 17 Sep 2024 · CVE-2024-8939
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.