Skip to content
OpenAdvisories

Package · PyPI

vllm

113 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-48746

    vLLM: OpenAI auth bypass

    vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust on those web servers enables an authentication bypass of the OpenAI API AuthenticationMiddleware. It a…

    vLLM vLLM vllm PyPI
  • Critical 9.8
    CVE-2026-22778 Public exploit Scanner template EPSS 18%

    vLLM leaks a heap address when PIL throws an error

    vLLM is an inference and serving engine for large language models (LLMs). From 0.8.3 to before 0.14.1, when an invalid image is sent to vLLM's multimodal endpoint, PIL throws an error. vLLM returns this error to the client, leaking a heap address. With this l…

    vLLM vLLM vllm PyPI
  • Critical 9.8
    CVE-2025-47277

    vLLM Allows Remote Code Execution via PyNcclPipe Communication Service

    vLLM, an inference and serving engine for large language models (LLMs), has an issue in versions 0.6.5 through 0.8.4 that ONLY impacts environments using the `PyNcclPipe` KV cache transfer integration with the V0 engine. No other configurations are affected. …

    vLLM vLLM vllm PyPI
  • Critical 10.0
    CVE-2025-32444

    vLLM Vulnerable to Remote Code Execution via Mooncake Integration

    vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.6.5 and prior to 0.8.5, having vLLM integration with mooncake, are vulnerable to remote code execution due to using pickle based serialization over …

    vLLM vLLM vllm PyPI
  • Critical 9.8
    GHSA-ggpf-24jw-3fcw

    CVE-2025-24357 Malicious model remote code execution fix bypass with PyTorch < 2.6.0

    ## Description https://github.com/vllm-project/vllm/security/advisories/GHSA-rh4j-5rhw-hr54 reported a vulnerability where loading a malicious model could result in code execution on the vllm host. The fix applied to specify `weights_only=True` to calls to `t…

    vllm PyPI
  • Critical 9.8
    CVE-2024-11041

    Remote Code Execution in vllm-project/vllm

    vllm-project vllm version v0.6.2 contains a vulnerability in the MessageQueue.dequeue() API function. The function uses pickle.loads to parse received sockets directly, leading to a remote code execution vulnerability. An attacker can exploit this by sending …

    vLLM vllm-project/vllm vllm PyPI
  • Critical 9.8
    CVE-2024-9053

    Remote Code Execution in vllm-project/vllm

    vllm-project vllm version 0.6.0 contains a vulnerability in the AsyncEngineRPCServer() RPC server entrypoints. The core functionality run_server_loop() calls the function _make_handler_coro(), which directly uses cloudpickle.loads() on received messages witho…

    vLLM vllm-project/vllm vllm PyPI
  • Critical 9.1
    CVE-2025-29783

    vLLM Allows Remote Code Execution via Mooncake Integration

    vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. When vLLM is configured to use Mooncake, unsafe deserialization exposed directly over ZMQ/TCP on all network interfaces will allow attackers to execute remote code on distri…

    vLLM vLLM vllm PyPI