Description
A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The load_from_url and load_from_url_async methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an attacker to coerce the vLLM server into making arbitrary requests to internal network resources.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat AI Inference Server | — | — |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | vllm | >= 0.5.0, < 0.11.0 | 0.11.0 | GHSA-3f6c-7fw2-ppm4 |
References
- https://access.redhat.com/security/cve/CVE-2025-6242 vdb-entry
- RHBZ#2373716 issue-tracking