Skip to content
OpenAdvisories
Medium WID-SEC-2026-3828 7 CVEs

vllm: Mehrere Schwachstellen

Published Oct 8, 2026 · Updated Nov 12, 2026 · Revision 5 · de

Vendor: Red Hat Product: Enterprise Linux Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in vllm ausnutzen, um einen Denial of Service Angriff durchzuführen und um Informationen offenzulegen.

Product

Open Source vLLM ist eine Open-Source-Bibliothek für schnelle und effiziente Inferenz von Large Language Models (LLMs).

Vulnerabilities 7

  • High 8.2
    CVE-2026-116176

    vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector

    vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outbound connections by embedding a decode address in the X-Request-Id header. Attackers can make a P2pNcclConnector prefill worker ZMQ-connect…

    vLLM vLLM vllm PyPI
  • High 7.7
    CVE-2026-116180

    vLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensors

    vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/outputs.py allocates an uninitialized int32 tensor, and the V1 model runner leaves prompt positions reported as computed by a KV connector unwritten. A client s…

    vLLM vLLM
  • High 7.5
    CVE-2026-116177

    vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass

    vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to exhaust memory because the Nemotron-VL processors globally set Image.MAX_IMAGE_PIXELS to None. Attackers can submit a pathologi…

    vLLM vLLM vllm PyPI
  • High 7.5
    CVE-2026-116179

    vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override

    vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg frame-count cap by overriding num_frames through media_io_kwargs. Attackers can set num_frames to -1 with a large inline video so Vide…

    vLLM vLLM
  • Medium 5.9
    CVE-2026-116172

    vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n

    vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC converter that allows remote attackers to bypass max_logprobs limits via CandidateTokens.top_n. Attackers can send Generate or GenerateStream requests with ove…

    vLLM vLLM
  • Medium 5.9
    CVE-2026-116173

    vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_ids

    vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to terminate EngineCore by bypassing logprob_token_ids limits in the Rust gRPC frontend. Attackers can send Generate or GenerateStream requests with output_…

    vLLM vLLM vllm PyPI
  • Medium 5.9
    CVE-2026-116178

    vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders

    vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engine by sending inconsistent multimodal metadata to the disaggregated /inference/v1/generate endpoint. Attackers can replay a valid multimoda…

    vLLM vLLM vllm PyPI

Revision history

  1. #5

    Neue Updates von Red Hat aufgenommen

  2. #4

    Neue Updates von Red Hat aufgenommen

  3. #3

    Neue Updates von Red Hat aufgenommen

  4. #2

    Referenz(en) aufgenommen: CVE-2026-116173, EUVD-2026-109434, CVE-2026-116172, EUVD-2026-109433, CVE-2026-116180, EUVD-2026-109441, CVE-2026-116179, EUVD-2026-109440, CVE-2026-116176, EUVD-2026-109437, CVE-2026-116177, EUVD-2026-109438, CVE-2026-116178, EUVD-2026-109439

  5. #1

    Initiale Fassung

References