CVE-2026-78684vLLM before 0.27.0 Denial of Service via DeepStream Backend Exploitation status Not known exploited Fix Affected product V vllm Published 08/25/2026 Severity Medium CVE-2026-73560vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections Exploitation status Public exploit Fix Affected product V vllm Published 08/17/2026 Severity Medium CVE-2026-71486vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds Exploitation status Not known exploited Fix Affected product V vllm Published 08/17/2026 Severity Medium CVE-2026-73559vLLM: Completion prompt lists fan out into unbounded engine requests Exploitation status Public exploit Fix Affected product V vllm Published 08/13/2026 Severity Medium CVE-2026-73558vLLM: Cross-User Data Leak Vulnerability Exploitation status Public exploit Fix Affected product V vllm Published 08/13/2026 Severity Medium CVE-2026-73557vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts Exploitation status Not known exploited Fix Affected product V vllm Published 08/13/2026 Severity Medium CVE-2026-73556vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of CVE-2026-55574 Exploitation status Public exploit Fix Affected product V vllm Published 08/13/2026 Severity Medium CVE-2026-73555vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages Exploitation status Not known exploited Fix Affected product V vllm Published 08/13/2026 Severity Medium CVE-2026-55514vLLM denial of service via prompt embeds on M-RoPE models Exploitation status Not known exploited Fix Affected product V vllm Published 07/06/2026 Severity High CVE-2026-55574vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends Exploitation status Not known exploited Fix Affected product V vllm Published 07/06/2026 Severity High CVE-2026-54234vLLM: Remote DoS in vLLM via Invalid Recovered Token Reinjection Exploitation status Public exploit Fix Affected product V vllm Published 07/06/2026 Severity High CVE-2026-55646vLLM speech-to-text endpoints allocate full upload before enforcing the audio file-size limit Exploitation status Public exploit Fix Affected product V vllm Published 07/06/2026 Severity Medium CVE-2026-47155vLLM: Artifact Pin Decay in vLLM allows pinned deployments to load unpinned code, weights, and processors Exploitation status Not known exploited Fix Affected product V vllm Published 06/22/2026 Severity Medium CVE-2026-41523vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution Exploitation status Not known exploited Fix Affected product V vllm Published 06/22/2026 Severity High CVE-2026-54232vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile Exploitation status Not known exploited Fix Affected product V vllm Published 06/22/2026 Severity High CVE-2026-54233vLLM: OOM Denial of Service via Audio Decompression Bomb Exploitation status Not known exploited Fix Affected product V vllm Published 06/22/2026 Severity Medium CVE-2026-54236vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router Exploitation status Public exploit Fix Affected product V vllm Published 06/22/2026 Severity Medium CVE-2026-54235vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels Exploitation status Not known exploited Fix Affected product V vllm Published 06/22/2026 Severity Medium CVE-2026-48746vLLM: OpenAI auth bypass Exploitation status Public exploit Fix Affected product V vllm Published 06/22/2026 Severity Critical CVE-2026-53923vLLM GGUF Kernels: int64_t to int truncation of tensor dimensions causes GPU buffer overflow Exploitation status Not known exploited Fix Affected product V vllm Published 06/22/2026 Severity Medium CVE-2026-12491Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations Exploitation status Not known exploited Fix Affected product V vllm Published 06/17/2026 Severity Medium CVE-2026-5497Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllm Exploitation status Public exploit Fix Affected product V vllm-project/vllm Published 06/11/2026 Severity High CVE-2026-4944Hardcoded trust_remote_code=True in vllm-project/vllm Bypasses User Security Control Exploitation status Public exploit Fix Not confirmed Affected product V vllm-project/vllm Published 05/28/2026 Severity High CVE-2026-9540vllm-project vllm OpenAI-compatible Serving Path denial of service Exploitation status Public exploit Fix Affected product V vllm Published 05/26/2026 Severity Medium CVE-2026-44223vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters Exploitation status Public exploit Fix Affected product V vllm Published 05/12/2026 Severity Medium CVE-2026-44222vLLM: Remote DoS via Special-Token Placeholders Exploitation status Not known exploited Fix Affected product V vllm Published 05/12/2026 Severity Medium CVE-2026-34756vLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server Exploitation status Not known exploited Fix Affected product V vllm Published 04/06/2026 Severity Medium CVE-2026-34755vLLM Affected by Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing Exploitation status Not known exploited Fix Affected product V vllm Published 04/06/2026 Severity Medium CVE-2026-34753vLLM affected by Server-Side Request Forgery (SSRF) in `download_bytes_from_url ` Exploitation status Not known exploited Fix Affected product V vllm Published 04/06/2026 Severity Medium CVE-2026-34760vLLM: Downmix Implementation Differences as Attack Vectors Against Audio AI Models Exploitation status Not known exploited Fix Affected product V vllm Published 04/02/2026 Severity Medium CVE-2026-27893vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out Exploitation status Not known exploited Fix Not confirmed Affected product V vllm Published 03/26/2026 Severity High CVE-2026-25960SSRF Protection Bypass in vLLM Exploitation status Not known exploited Fix Not confirmed Affected product V vllm Published 03/09/2026 Severity High CVE-2026-22778vLLM leaks a heap address when PIL throws an error Exploitation status Not known exploited Fix Affected product V vllm Published 02/02/2026 Severity Critical CVE-2026-24779vLLM vulnerable to Server-Side Request Forgery (SSRF) in `MediaConnector` Exploitation status Public exploit Fix Not confirmed Affected product V vllm Published 01/27/2026 Severity High CVE-2026-22807vLLM affected by RCE via auto_map dynamic module loading during model initialization Exploitation status Not known exploited Fix Not confirmed Affected product V vllm Published 01/21/2026 Severity High CVE-2026-22773vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions Exploitation status Not known exploited Fix Affected product V vllm Published 01/10/2026 Severity Medium CVE-2025-66448vLLM vulnerable to remote code execution via transformers_utils/get_config Exploitation status Not known exploited Fix Affected product V vllm Published 12/01/2025 Severity High CVE-2025-62372vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs Exploitation status Not known exploited Fix Affected product V vllm Published 11/21/2025 Severity High CVE-2025-62426vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs` Exploitation status Not known exploited Fix Affected product V vllm Published 11/21/2025 Severity Medium CVE-2025-62164VLLM deserialization vulnerability leading to DoS and potential RCE Exploitation status Not known exploited Fix Affected product V vllm Published 11/21/2025 Severity High CVE-2025-59425vLLM vulnerable to timing attack at bearer auth Exploitation status Not known exploited Fix Not confirmed Affected product V vllm Published 10/07/2025 Severity High CVE-2025-48956vLLM API endpoints vulnerable to Denial of Service Attacks Exploitation status Not known exploited Fix Affected product V vllm Published 08/21/2025 Severity High CVE-2025-48944vLLM Tool Schema allows DoS via Malformed pattern and type Fields Exploitation status Public exploit Fix Not confirmed Affected product V vllm Published 05/30/2025 Severity Medium CVE-2025-48943vLLM allows clients to crash the openai server with invalid regex Exploitation status Not known exploited Fix Not confirmed Affected product V vllm Published 05/30/2025 Severity Medium CVE-2025-48942vLLM DOS: Remotely kill vllm over http with invalid JSON schema Exploitation status Public exploit Fix Not confirmed Affected product V vllm Published 05/30/2025 Severity Medium CVE-2025-48887vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py` Exploitation status Public exploit Fix Not confirmed Affected product V vllm Published 05/30/2025 Severity Medium CVE-2025-46722vLLM has a Weakness in MultiModalHasher Image Hashing Implementation Exploitation status Not known exploited Fix Affected product V vllm Published 05/29/2025 Severity Medium CVE-2025-46570vLLM’s Chunk-Based Prefix Caching Vulnerable to Potential Timing Side-Channel Exploitation status Not known exploited Fix Affected product V vllm Published 05/29/2025 Severity Low CVE-2025-47277vLLM Allows Remote Code Execution via PyNcclPipe Communication Service Exploitation status Not known exploited Fix Not confirmed Affected product V vllm Published 05/20/2025 Severity Critical CVE-2025-30165Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration Exploitation status Not known exploited Fix Not confirmed Affected product V vllm Published 05/06/2025 Severity High CVE-2025-32444vLLM Vulnerable to Remote Code Execution via Mooncake Integration Exploitation status Not known exploited Fix Affected product V vllm Published 04/30/2025 Severity Critical CVE-2025-46560vLLM phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of service Exploitation status Public exploit Fix Affected product V vllm Published 04/30/2025 Severity Medium CVE-2025-30202Data exposure via ZeroMQ on multi-node vLLM deployment Exploitation status Not known exploited Fix Affected product V vllm Published 04/30/2025 Severity High CVE-2024-11041Remote Code Execution in vllm-project/vllm Exploitation status Public exploit Fix Not confirmed Affected product V vllm-project/vllm Published 03/20/2025 Severity Critical CVE-2024-9053Remote Code Execution in vllm-project/vllm Exploitation status Public exploit Fix Not confirmed Affected product V vllm-project/vllm Published 03/20/2025 Severity Critical CVE-2025-29783vLLM Allows Remote Code Execution via Mooncake Integration Exploitation status Not known exploited Fix Affected product V vllm Published 03/19/2025 Severity Critical CVE-2025-29770vLLM denial of service via outlines unbounded cache on disk Exploitation status Not known exploited Fix Affected product V vllm Published 03/19/2025 Severity Medium CVE-2025-25183vLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cache Exploitation status Not known exploited Fix Not confirmed Affected product V vllm Published 02/07/2025 Severity Low CVE-2025-24357vLLM allows a malicious model RCE by torch.load in hf_model_weights_iterator Exploitation status Not known exploited Fix Affected product V vllm Published 01/27/2025 Severity High 
