Vulnerabilities in vllm-project
125 resultsCVE-2026-90553HIGHvLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processorEPSS 0.3%CVE-2026-105758MEDIUMvLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reachEPSS 0.3%CVE-2026-105760MEDIUMvLLM: GLMGA video sampling permits request-driven CPU and memory exhaustionEPSS 0.3%CVE-2026-105775MEDIUMvllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-boundsEPSS 0.3%CVE-2026-116177HIGHvLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard BypassEPSS 0.3%CVE-2026-34760MEDIUMvLLM: Downmix Implementation Differences as Attack Vectors Against Audio AI ModelsEPSS 0.3%CVE-2026-116174HIGHvLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC GenerateEPSS 0.3%CVE-2026-114054HIGHvLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache KeysEPSS 0.3%CVE-2026-105754MEDIUMvLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresEPSS 0.3%CVE-2026-114049MEDIUMvLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condenseEPSS 0.3%CVE-2026-34753MEDIUMvLLM affected by Server-Side Request Forgery (SSRF) in `download_bytes_from_url `EPSS 0.3%CVE-2026-116180HIGHvLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensorsEPSS 0.3%CVE-2026-47155MEDIUMvLLM: Artifact Pin Decay in vLLM allows pinned deployments to load unpinned code, weights, and processorsEPSS 0.2%CVE-2026-73557MEDIUMvLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt partsEPSS 0.2%CVE-2026-93840MEDIUMvLLM before 0.29.0 Cross-Request Logits Corruption via allowed_token_idsEPSS 0.2%CVE-2026-115917LOWvLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP serverEPSS 0.2%CVE-2026-12491MEDIUMVllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectationsEPSS 0.2%CVE-2026-93841MEDIUMvLLM through 0.29.0 Adjacent-Request Sampler State Corruption via Unvalidated Prompt Token IDsEPSS 0.2%CVE-2026-105752LOWvLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracleEPSS 0.2%CVE-2026-114050HIGHvLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUIDEPSS 0.2%