vllm
- Software type
- AI and machine learning platform
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, vllm recorded 74 security vulnerabilities in the last 90 days, of which 33 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of vllm and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-115918vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargsCVE-2026-115917vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP serverCVE-2026-115916vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)CVE-2026-115915vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCECVE-2026-115914vLLM DeepSeek-OCR image processing vulnerable to denial of service| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-115918vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2026-115917vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server | Exploitation statusNot exploited | FixYes | Published10/26/2026 | SeverityLow |
|---|
CVE-2026-115916vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS) | Exploitation statusNot exploited | FixYes | Published10/26/2026 | SeverityMedium |
|---|
CVE-2026-115915vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE | Exploitation statusNot exploited | FixYes | Published10/26/2026 | SeverityHigh |
|---|
CVE-2026-115914vLLM DeepSeek-OCR image processing vulnerable to denial of service | Exploitation statusNot exploited | FixYes | Published10/26/2026 | SeverityMedium |
|---|
CVE-2026-115913vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine | Exploitation statusNot exploited | FixYes | Published10/26/2026 | SeverityMedium |
|---|
CVE-2026-115912vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled | Exploitation statusNot exploited | FixYes | Published10/26/2026 | SeverityHigh |
|---|
CVE-2026-115911vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool | Exploitation statusNot exploited | FixYes | Published10/26/2026 | SeverityMedium |
|---|
CVE-2026-116181vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids | Exploitation statusNot exploited | FixYes | Published10/25/2026 | SeverityHigh |
|---|
CVE-2026-116180vLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensors | Exploitation statusNot exploited | FixYes | Published10/25/2026 | SeverityHigh |
|---|
CVE-2026-116179vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override | Exploitation statusNot exploited | FixYes | Published10/25/2026 | SeverityHigh |
|---|
CVE-2026-116178vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders | Exploitation statusNot exploited | FixYes | Published10/25/2026 | SeverityHigh |
|---|
CVE-2026-116177vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass | Exploitation statusNot exploited | FixYes | Published10/25/2026 | SeverityHigh |
|---|
CVE-2026-116176vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector | Exploitation statusNot confirmed | FixYes | Published10/25/2026 | SeverityHigh |
|---|
CVE-2026-116175vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions | Exploitation statusNot exploited | FixYes | Published10/25/2026 | SeverityHigh |
|---|
CVE-2026-116174vLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate | Exploitation statusNot exploited | FixYes | Published10/25/2026 | SeverityHigh |
|---|
CVE-2026-116173vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_ids | Exploitation statusNot exploited | FixYes | Published10/25/2026 | SeverityHigh |
|---|
CVE-2026-116172vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n | Exploitation statusNot confirmed | FixYes | Published10/25/2026 | SeverityHigh |
|---|
CVE-2026-114055vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs | Exploitation statusNot exploited | FixYes | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-114054vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keys | Exploitation statusNot exploited | FixYes | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-114053vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision | Exploitation statusNot exploited | FixYes | Published10/21/2026 | SeverityCritical |
|---|
CVE-2026-114052vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargs | Exploitation statusNot exploited | FixYes | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-114051vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generate | Exploitation statusNot exploited | FixYes | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-114050vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUID | Exploitation statusNot exploited | FixYes | Published10/21/2026 | SeverityHigh |
|---|
CVE-2026-114049vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense | Exploitation statusNot exploited | FixYes | Published10/21/2026 | SeverityMedium |
|---|
CVE-2026-109311vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Upload | Exploitation statusActively exploited | FixYes | Published10/12/2026 | SeverityHigh |
|---|
CVE-2026-105922vllm-project vLLM Penalty Handler denial of service can crash the inference engine | Exploitation statusActively exploited | FixNo | Published10/06/2026 | SeverityMedium |
|---|
CVE-2026-105775vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds | Exploitation statusActively exploited | FixNo | Published10/06/2026 | SeverityMedium |
|---|
CVE-2026-105760vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion | Exploitation statusNot exploited | FixYes | Published10/05/2026 | SeverityMedium |
|---|
CVE-2026-105759vLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service) | Exploitation statusActively exploited | FixYes | Published10/05/2026 | SeverityMedium |
|---|
CVE-2026-105758vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach | Exploitation statusNot exploited | FixYes | Published10/05/2026 | SeverityMedium |
|---|
CVE-2026-105757vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites) | Exploitation statusNot exploited | FixYes | Published10/05/2026 | SeverityMedium |
|---|
CVE-2026-105756vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service | Exploitation statusNot exploited | FixYes | Published10/05/2026 | SeverityMedium |
|---|
CVE-2026-105755vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank` | Exploitation statusNot exploited | FixYes | Published10/05/2026 | SeverityMedium |
|---|
CVE-2026-105754vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features | Exploitation statusNot exploited | FixYes | Published10/05/2026 | SeverityMedium |
|---|
CVE-2026-105753vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core | Exploitation statusNot exploited | FixYes | Published10/05/2026 | SeverityMedium |
|---|
CVE-2026-105752vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle | Exploitation statusNot exploited | FixYes | Published10/05/2026 | SeverityLow |
|---|
CVE-2026-103241vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of service | Exploitation statusActively exploited | FixYes | Published09/30/2026 | SeverityMedium |
|---|
CVE-2026-100654vLLM before 0.29.0 Denial of Service via out-of-range stop_token_ids | Exploitation statusNot exploited | FixYes | Published09/26/2026 | SeverityHigh |
|---|
CVE-2026-100653vLLM 0.22.1 before 0.28.0 Incomplete Artifact Pin Propagation | Exploitation statusActively exploited | FixYes | Published09/26/2026 | SeverityHigh |
|---|
CVE-2026-100652vLLM 0.22.0 through 0.23.0 Denial of Service via stop_token_ids | Exploitation statusNot exploited | FixYes | Published09/26/2026 | SeverityHigh |
|---|
CVE-2026-100651vllm before 0.29.0 Denial of Service via Decoder Prompt Length Bypass | Exploitation statusActively exploited | FixYes | Published09/26/2026 | SeverityHigh |
|---|
CVE-2026-100650vLLM before 0.29.0 Resource Exhaustion via Unbounded Media Materialization | Exploitation statusActively exploited | FixYes | Published09/26/2026 | SeverityHigh |
|---|
CVE-2026-100649vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclass | Exploitation statusNot exploited | FixYes | Published09/26/2026 | SeverityMedium |
|---|
CVE-2026-100648vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding | Exploitation statusNot exploited | FixYes | Published09/26/2026 | SeverityMedium |
|---|
CVE-2026-100647vLLM before 0.29.0 CPU Exhaustion via unbounded cache_salt | Exploitation statusNot exploited | FixYes | Published09/26/2026 | SeverityMedium |
|---|
CVE-2026-94627vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision | Exploitation statusNot exploited | FixYes | Published09/21/2026 | SeverityHigh |
|---|
CVE-2026-94626vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_size | Exploitation statusNot exploited | FixYes | Published09/21/2026 | SeverityHigh |
|---|
CVE-2026-94625vLLM through 0.29.0 Resource Exhaustion via Ownerless Mooncake Transfer Placeholders | Exploitation statusNot exploited | FixYes | Published09/21/2026 | SeverityMedium |
|---|
CVE-2026-94624vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading Sessions | Exploitation statusNot exploited | FixYes | Published09/21/2026 | SeverityHigh |
|---|
121 Results | Page 1 of 3