vllm
0 live · 106 on record · last incident 20 days ago
Records106
- closed7.1vLLM CVE-2026-116181: vLLM input validation flaw permits engine crashes via out-of-vocabulary tokens
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116181
AI - closed8.7vLLM CVE-2026-116179: vLLM video frame-count cap bypass causes resource exhaustion and crash
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116179
AI - closed8.8vLLM CVE-2026-116176: vLLM server-side request forgery leads to NCCL unique_id and KV-cache leakage
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116176
AI - closed8.2vLLM CVE-2026-116172: vLLM Rust gRPC converter allows max_logprobs limit bypass and engine crash
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116172
AI - closed7.1vLLM CVE-2026-116175: vLLM audio processing path vulnerable to decompression bomb memory exhaustion
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116175
AI - closed8.7vLLM CVE-2026-116177: vLLM uncontrolled resource consumption via decompression bomb
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116177
AI - closed8.2vLLM CVE-2026-116174: vLLM improper input validation in Rust gRPC service
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116174
AI - closed8.2vLLM CVE-2026-116173: vLLM denial of service via logprob token limits bypass
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116173
AI - closed8.2vLLM CVE-2026-116178: vLLM denial of service via inconsistent multimodal metadata
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116178
AI - closed8.3vLLM CVE-2026-116180: vLLM denial of service vulnerability in tensor allocation
Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116180
AI - closedvLLM vLLM Denial of Service through Multimodal UUID Cache Desynchronization
Patch now · Disclosed · since 21 Oct 2026
AI - closedvLLM vLLM Denial of Service via Unvalidated mm_processor_kwargs
Patch now · Disclosed · since 21 Oct 2026
AI - closed6.5vLLM CVE-2026-114050: vLLM multimodal UUID cache identity flaw leads to engine crash
Patch now · Disclosed · since 21 Oct 2026 · updated 23 Oct 2026 · CVE-2026-114050
AI - closed7.1vLLM CVE-2026-114054: vLLM cache aliasing vulnerability exposes processed media and KV state
Patch now · Disclosed · since 21 Oct 2026 · CVE-2026-114054
AI - closed7.5vLLM CVE-2026-114051: vLLM input validation check omission causes denial of service
Patch now · Disclosed · since 21 Oct 2026 · CVE-2026-114051
AI - closed6.3vLLM CVE-2026-114049: vLLM cross-request mask leak vulnerability
Patch now · Disclosed · since 21 Oct 2026 · CVE-2026-114049
AI - closed7.5vLLM CVE-2026-114055: vLLM Uncontrolled Resource Consumption via Multimodal Parameters
Patch now · Disclosed · since 21 Oct 2026 · updated 23 Oct 2026 · CVE-2026-114055
AI - closed8.7vLLM CVE-2026-114052: vLLM MOSS-Audio Model Serving Memory Exhaustion Vulnerability
Patch now · Disclosed · since 21 Oct 2026 · CVE-2026-114052
AI - closed9.2vLLM CVE-2026-114053: vLLM Vulnerable to Remote Code Execution via mm_processor_kwargs.code_revision
Patch now · Disclosed · Patched · since 21 Oct 2026 · updated 27 Oct 2026 · CVE-2026-114053
AI - closed7.1vLLM CVE-2026-109311: vLLM audio transcription endpoint heap overflow vulnerability
Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109311
AI - closed4.3vLLM Denial of Service Vulnerability in vLLM Penalty Handler
Patch now · Disclosed · since 6 Oct 2026 · CVE-2026-105922
AI - closed5.3vLLM vLLM Denial of Service via Unbounded Video Sampler Frames
Patch now · Disclosed · since 5 Oct 2026 · CVE-2026-105758
AI - closed3.1vLLM vLLM tool continuations drop cache_salt to restore prefix-cache oracle
Patch now · Disclosed · since 5 Oct 2026 · updated 6 Oct 2026 · CVE-2026-105752
AI - closed5.3vLLM vLLM GLMGA video sampling permits CPU and memory exhaustion
Patch now · Disclosed · since 5 Oct 2026 · CVE-2026-105760
AI - closed4.2vLLM vLLM flash late-interaction scoring permits cross-request integrity break
Patch now · Disclosed · since 5 Oct 2026 · CVE-2026-105755
AI - closed6.5vLLM vLLM loose cache_salt validation causes engine crash on LMCache-MP
Patch now · Disclosed · since 5 Oct 2026 · CVE-2026-105756
AI - closed6.5vLLM vLLM structured-output requests cause engine-fatal denial of service
Patch now · Disclosed · since 5 Oct 2026 · CVE-2026-105757
AI - closed7.5vLLM CVE-2026-105759: vLLM Prometheus Metrics Memory Exhaustion Vulnerability
Patch now · Disclosed · since 5 Oct 2026 · CVE-2026-105759
AI - closed6.5vLLM CVE-2026-105753: vLLM Multimodal IPC Cache Desync Denial of Service
Patch now · Disclosed · since 5 Oct 2026 · updated 6 Oct 2026 · CVE-2026-105753
AI - closed6.5vLLM CVE-2026-105754: vLLM disaggregated transport trusts caller-supplied features
Patch now · Disclosed · since 5 Oct 2026 · CVE-2026-105754
AI - closed5.5vLLM CVE-2026-103241: Denial of service vulnerability in vLLM
Patch now · Exploited · since 30 Sep 2026 · CVE-2026-103241
AI - closed6.9vLLM CVE-2026-100647: vLLM denial-of-service vulnerability in cache_salt parameter
Patch now · Disclosed · since 26 Sep 2026 · CVE-2026-100647
AI - closed8.3vLLM CVE-2026-100653: vLLM revision pin failure during Hugging Face artifact loads
Patch now · Disclosed · since 26 Sep 2026 · CVE-2026-100653
AI - closed7.1vLLM CVE-2026-100651: vLLM omits prompt-length validation on disaggregated endpoint
Patch now · Disclosed · since 26 Sep 2026 · CVE-2026-100651
AI - closed7.1vLLM CVE-2026-100650: vLLM materializes remote media before size enforcement
Patch now · Disclosed · since 26 Sep 2026 · CVE-2026-100650
AI - closed7.1vLLM CVE-2026-100654: vLLM flawed stop_token_ids validation causes CUDA error
Patch now · Disclosed · since 26 Sep 2026 · CVE-2026-100654
AI - closed8.7vLLM CVE-2026-94626: vLLM Memory Exhaustion via Unvalidated tp_size Parameter
Patch now · Disclosed · since 21 Sep 2026 · CVE-2026-94626
AI - closed6.9vLLM CVE-2026-94625: vLLM Resource Exhaustion in MooncakeConnector Transfer Placeholders
Patch now · Disclosed · since 21 Sep 2026 · CVE-2026-94625
AI - closed8.7vLLM CVE-2026-94622: vLLM Denial of Service in NIXL Connector Metadata Handling
Patch now · Disclosed · since 21 Sep 2026 · CVE-2026-94622
AI - closed8.7vLLM vLLM Mooncake connector GPU memory exhaustion vulnerability
Patch now · Disclosed · since 21 Sep 2026 · CVE-2026-94627
AI - closed8.7vLLM vLLM P2P KV offloading denial of service vulnerability
Patch now · Disclosed · Patched · since 21 Sep 2026 · updated 27 Oct 2026 · CVE-2026-94624
AI - closed8.7vLLM vLLM NIXL connector denial of service vulnerability
Patch now · Disclosed · since 21 Sep 2026 · CVE-2026-94623
AI - closed3.1vLLM vLLM bad_words token index validation flaw in SamplingParams
Patch now · Disclosed · since 19 Sep 2026 · CVE-2026-93989
AI - closed6.3vLLM CVE-2026-93840: Validation flaw in vLLM allowed_token_ids handling
Patch now · Disclosed · since 18 Sep 2026 · CVE-2026-93840
AI - closed8.7vLLM CVE-2026-93592: Input validation flaw in vLLM embeddings and pooling endpoints
Patch now · Disclosed · since 18 Sep 2026 · CVE-2026-93592
AI - closed6.3vLLM CVE-2026-93841: Memory corruption in vLLM Triton bincount kernel
Patch now · Disclosed · since 18 Sep 2026 · CVE-2026-93841
AI - closed8.7vLLM CVE-2026-93436: Memory exhaustion vulnerability in vLLM inference server
Patch now · Disclosed · since 17 Sep 2026 · CVE-2026-93436
AI - closed6.9vLLM vLLM MoRIIO Acknowledgement Handler Resource Consumption Vulnerability
Patch now · Disclosed · since 16 Sep 2026 · CVE-2026-92220
AI - closed5.3vLLM CVE-2026-92365: Algorithmic complexity vulnerability in vLLM
Patch now · Disclosed · since 16 Sep 2026 · CVE-2026-92365
AI - closed6.5vLLM CVE-2026-57173: vLLM audio input handling out-of-memory flaw
Patch now · Disclosed · since 16 Sep 2026 · CVE-2026-57173
AI - closed6.5vLLM CVE-2026-69147: vLLM video backend GPU memory allocation flaw
Patch now · Disclosed · since 16 Sep 2026 · updated 17 Sep 2026 · CVE-2026-69147
AI - closed4.3vLLM CVE-2026-90878: vLLM Jinja Template Rendering Resource Consumption Vulnerability
Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-90878
AI - closed3.3vLLM CVE-2026-90713: Denial of service vulnerability in vLLM
Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-90713
AI - closed7.1vLLM CVE-2026-90555: vLLM Audio Transcription Memory Exhaustion
Patch now · Disclosed · since 12 Sep 2026 · CVE-2026-90555
AI - closed8.5vLLM CVE-2026-90553: vLLM Remote Code Execution Vulnerability
Patch now · Disclosed · since 12 Sep 2026 · CVE-2026-90553
AI - closed6.9vLLM CVE-2026-90554: vLLM audio decode size limit vulnerability
Patch now · Disclosed · since 12 Sep 2026 · CVE-2026-90554
AI - closed7.5vLLM CVE-2026-37237: vLLM Unbounded Media Fetching Memory Exhaustion
Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-37237
AI - closed6.9vLLM CVE-2026-78684: vLLM DeepStream Decode Path Resource Control Bypass
Patch now · Disclosed · since 25 Aug 2026 · CVE-2026-78684
AI - closed6.5vLLM CVE-2026-73560: vLLM multimodal processor vulnerable to arbitrary file reads and SSRF
Patch now · Disclosed · since 17 Aug 2026 · updated 8 Sep 2026 · CVE-2026-73560
AI - closed4.3vLLM CVE-2026-71486: vLLM derender endpoints vulnerable to resource exhaustion
Patch now · Disclosed · since 17 Aug 2026 · updated 4 Sep 2026 · CVE-2026-71486
AI - closed5.3vLLM CVE-2026-73558: vLLM data leakage vulnerability in activation kernels
Patch now · Disclosed · since 13 Aug 2026 · updated 8 Sep 2026 · CVE-2026-73558
AI - closed5.3vLLM CVE-2026-73556: vLLM denial of service via regex structured output
Patch now · Disclosed · since 13 Aug 2026 · updated 4 Sep 2026 · CVE-2026-73556
AI - closed6.3vLLM CVE-2026-73557: vLLM prompt embed check bypass vulnerability
Patch now · Disclosed · since 13 Aug 2026 · updated 4 Sep 2026 · CVE-2026-73557
AI - closed6.5vLLM CVE-2026-73559: Denial of service vulnerability in vLLM completion prompt preprocessing
Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-73559
AI - closed5.3vLLM CVE-2026-73555: Information disclosure vulnerability in vLLM request validation handling
Patch now · Disclosed · since 13 Aug 2026 · updated 4 Sep 2026 · CVE-2026-73555
AI - closed6.8vLLM CVE-2026-27765: Input validation flaw in vLLM Intel Gaudi plugin allows denial of service
Patch now · Disclosed · since 11 Aug 2026 · CVE-2026-27765
AI - closed7.5vllm-orchestrator-gateway CVE-2026-15574: vllm-orchestrator-gateway Logs Sensitive Bearer Tokens and Chat Content
Patch now · Disclosed · since 13 Jul 2026 · CVE-2026-15574
AI - closed7.1vLLM vLLM denial of service via prompt embeds on M-RoPE models
Patch now · Disclosed · since 20 Jul 2026 · updated 20 Jul 2026 · CVE-2026-55514
AI - closed8.7vLLM vLLM ReDoS vulnerability in structured outputs regex compilation
Patch now · Disclosed · since 17 Jul 2026 · updated 17 Jul 2026 · CVE-2026-55574
AI - closed6.5vLLM CVE-2026-55646: vLLM speech-to-text enforces size limit after full file read
Patch now · Disclosed · since 17 Jul 2026 · updated 17 Jul 2026 · CVE-2026-55646
AI - closed7.5vLLM CVE-2026-54234: vLLM remote denial of service via invalid recovered token reinjection
Patch now · Disclosed · since 17 Jul 2026 · updated 17 Jul 2026 · CVE-2026-54234
AI - closed4.8vLLM CVE-2026-12491: vLLM flawed image metadata handling leads to input distortion
Patch now · Disclosed · since 17 Jun 2026 · CVE-2026-12491
AI - closed5.3vLLM CVE-2026-54236: vLLM Incomplete Fix Leaks PIL Repr Addresses
Patch now · Disclosed · since 17 Jun 2026 · updated 22 Jun 2026 · CVE-2026-54236
AI - closed6.9vLLM CVE-2026-54235: vLLM temperature validation bypass for NaN and Infinity values
Patch now · Disclosed · since 17 Jun 2026 · updated 22 Jun 2026 · CVE-2026-54235
AI - closed7.5vLLM CVE-2026-53923: vLLM GGUF Dequantization Kernel Information Disclosure
Patch now · Disclosed · since 17 Jun 2026 · updated 22 Jun 2026 · CVE-2026-53923
AI - closed6.5vLLM CVE-2026-54233: vLLM OOM Denial of Service via Audio Decompression
Patch now · Disclosed · since 17 Jun 2026 · updated 22 Jun 2026 · CVE-2026-54233
AI - closed9.1vLLM CVE-2026-48746: vLLM OpenAI API Authentication Bypass
Patch now · Disclosed · since 16 Jun 2026 · updated 22 Jun 2026 · CVE-2026-48746
AI - closed7.5vLLM CVE-2026-5497: vLLM vulnerable to OOM Denial of Service
Patch now · Disclosed · since 11 Jun 2026 · CVE-2026-5497
AI - closed6.5vLLM CVE-2026-47155: vLLM artifact pin decay allows loading unpinned code and weights
Patch now · Disclosed · since 10 Jun 2026 · updated 22 Jun 2026 · CVE-2026-47155
AI - closed6.5vLLM vLLM speculative decoding crashes server via penalty parameters
Patch now · Disclosed · since 6 May 2026 · updated 12 May 2026 · CVE-2026-44223
AI - closed6.5vLLM CVE-2026-44222: vLLM vulnerable to remote DoS via special-token placeholders
Patch now · Disclosed · since 5 May 2026 · updated 12 May 2026 · CVE-2026-44222
AI - closed6.5vLLM CVE-2026-34755: vLLM Denial of Service via Unbounded Base64 Frames
Patch now · Disclosed · since 3 Apr 2026 · updated 6 Apr 2026 · CVE-2026-34755
AI - closed6.5vLLM CVE-2026-34756: vLLM Unauthenticated Denial of Service via Parameter
Patch now · Disclosed · since 3 Apr 2026 · updated 6 Apr 2026 · CVE-2026-34756
AI - closed5.9vLLM vLLM audio downmixing differential enables moderation bypass
Patch now · Disclosed · since 17 Jul 2026 · updated 17 Jul 2026 · CVE-2026-34760
AI - closed8.8vLLM CVE-2026-27893: vLLM Hardcoded Trust Override Enables RCE
Patch now · Disclosed · since 27 Mar 2026 · CVE-2026-27893
AI - closed5.4vLLM CVE-2026-25960: vLLM has SSRF Protection Bypass
Patch now · Disclosed · since 9 Mar 2026 · CVE-2026-25960
AI - closed8.8vLLM CVE-2026-56340: vLLM introduces enhanced protection for sparse tensor validation DoS
Patch now · Disclosed · since 8 Jan 2026 · updated 20 Jun 2026 · CVE-2026-56340
AI - closed8.8vLLM CVE-2025-62164: vLLM memory corruption via unvalidated prompt-embedding tensors
Patch now · Disclosed · since 20 Nov 2025 · updated 21 Nov 2025 · CVE-2025-62164
AI - closed6.5vLLM CVE-2025-62426: vLLM Vulnerable to DoS via Chat Completion Request Parameters
Patch now · Disclosed · since 20 Nov 2025 · updated 21 Nov 2025 · CVE-2025-62426
AI - closed8.3vLLM CVE-2025-62372: vLLM vulnerable to denial of service via multimodal embedding inputs
Patch now · Disclosed · since 20 Nov 2025 · updated 21 Nov 2025 · CVE-2025-62372
AI - closed6.5vLLM CVE-2025-61620: vLLM resource exhaustion via malicious Jinja template
Patch now · Disclosed · since 7 Oct 2025 · CVE-2025-61620
AI - closed7.5vLLM CVE-2025-59425: vLLM vulnerable to timing attack at bearer auth
Patch now · Disclosed · since 7 Oct 2025 · CVE-2025-59425
AI - closed7.1vLLM CVE-2025-6242: vLLM vulnerable to SSRF through MediaConnector
Patch now · Disclosed · since 7 Oct 2025 · CVE-2025-6242
AI - closed6.5vLLM CVE-2025-48943: vLLM Denial of Service via Invalid Regex Output
Patch now · Disclosed · since 28 May 2025 · updated 30 May 2025 · CVE-2025-48943
AI - closed6.5vLLM CVE-2025-48942: vLLM Denial of Service via Invalid JSON Schema
Patch now · Disclosed · since 28 May 2025 · updated 30 May 2025 · CVE-2025-48942
AI - closed6.5vLLM CVE-2025-48887: vLLM ReDoS Vulnerability in pythonic_tool_parser
Patch now · Disclosed · since 28 May 2025 · updated 30 May 2025 · CVE-2025-48887
AI - closedvLLM vLLM Regular Expression Denial of Service
Patch now · Disclosed · since 28 May 2025
AI - closed4.2vLLM CVE-2025-46722: vLLM MultiModalHasher Image Hashing Weakness
Patch now · Disclosed · since 28 May 2025 · updated 29 May 2025 · CVE-2025-46722
AI - closed2.6vLLM CVE-2025-46570: Timing Side-Channel in vLLM Prefix Caching
Patch now · Disclosed · since 28 May 2025 · updated 29 May 2025 · CVE-2025-46570
AI - closed6.5vLLM CVE-2025-48944: vLLM Tool Schema Allows DoS via Malformed Fields
Patch now · Disclosed · since 28 May 2025 · updated 30 May 2025 · CVE-2025-48944
AI - closed9.8vLLM CVE-2025-47277: vLLM Remote Code Execution via PyNcclPipe
Patch now · Disclosed · since 20 May 2025 · CVE-2025-47277
AI - closed8.0vLLM CVE-2025-30165: Remote Code Execution in vLLM Multi-Node Cluster Configuration
Patch now · Disclosed · since 6 May 2025 · CVE-2025-30165
AI - closed6.5vLLM CVE-2025-46560: vLLM vulnerable to denial of service via quadratic time complexity
Patch now · Disclosed · since 29 Apr 2025 · updated 30 Apr 2025 · CVE-2025-46560
AI - closed2.6vLLM CVE-2025-25183: vLLM vulnerable to hash collisions in prefix cache
Patch now · Disclosed · since 6 Feb 2025 · updated 7 Feb 2025 · CVE-2025-25183
AI - closed8.7vLLM CVE-2024-8768: vLLM denial of service vulnerability
Patch now · Disclosed · since 17 Sep 2024 · CVE-2024-8768
AI - closed6.9vLLM CVE-2024-8939: vLLM Denial of Service via best_of parameter
Patch now · Disclosed · since 17 Sep 2024 · CVE-2024-8939
AI