Sound the depths of every vulnerability.

▾ Sunlitvllm-project · vllmEPSS 0.31%via CVEORG

vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions

vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO multimodal path calls load_audio without the max_duration_s decoded-duration limit. Authenticated attackers can send small compressed aud…

CVE-2026-116174Medium· 5.9

▾ Sunlitvllm-project · vllmEPSS 0.28%via CVEORG

vLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate

vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC Generate and GenerateStream service that forwards unchecked prompt token IDs to EngineCore. Attackers can submit requests with out-of-voc…

CVE-2026-116179High· 7.5

▾ Twilightvllm-project · vllmEPSS 0.30%via CVEORG

vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override

vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg frame-count cap by overriding num_frames through media_io_kwargs. Attackers can set num_frames to -1 with a larg…

CVE-2026-116177High· 7.5

▾ Twilightvllm-project · vllmEPSS 0.29%via CVEORG

vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass

vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to exhaust memory because the Nemotron-VL processors globally set Image.MAX_IMAGE_PIXELS to None. Attackers …

CVE-2026-116181Medium· 6.5

▾ Sunlitvllm-project · vllmEPSS 0.37%via CVEORG

vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids

vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash the engine by supplying out-of-vocabulary stop_token_ids. Attackers can send OpenAI chat, completion, generate, or b…

CVE-2026-116180High· 7.7

▾ Twilightvllm-project · vllmEPSS 0.25%via CVEORG

vLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensors

vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/outputs.py allocates an uninitialized int32 tensor, and the V1 model runner leaves prompt positions reported as computed by a KV connector…

CVE-2026-114049Low· 3.7

▾ Sunlitvllm-project · vllmEPSS 0.27%via CVEORG

vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense

vLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense() that allows remote attackers to constrain other clients' outputs by leaving stale allowed_token_ids rows. Attackers can submit concurrent constrained generate…

CVE-2026-114051High· 7.5

▾ Twilightvllm-project · vllmEPSS 0.38%via CVEORG

vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generate

vLLM before 0.31.0 skips the min_tokens <= max_tokens check for /inference/v1/generate requests with a null max_tokens, so the EngineCore input thread later dies on an uncaught VLLMValidationError while /health still returns 200. Unauthe…

CVE-2026-114054Medium· 6.5

▾ Sunlitvllm-project · vllmEPSS 0.27%via CVEORG

vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keys

vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF ImageID or cache_salt. Attackers can set a UUID EXIF ImageID t…

CVE-2026-114053High· 8.1

▾ Twilightvllm-project · vllmEPSS 0.46%via CVEORG

vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision

vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting clients select which revision of a model's dynamic processor code is imported when trust…

CVE-2026-114055High· 7.5

▾ Twilightvllm-project · vllmEPSS 0.42%via CVEORG

vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs

vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that allows remote clients to control multimodal processor parameters by supplying per-request mm_processor_kwargs. Attackers can set large image s…

CVE-2026-109311Medium· 6.5PoC

3w ago

vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open() fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow

vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open() fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow. Authenticated remote attackers can repeatedly upload malformed IAMF containers to /v…

▾ Twilightvllm-project · vllmEPSS 0.48%via NVD

CVE-2026-105775Medium· 4.3PoC

4w ago

A security vulnerability has been detected in vllm-project vLLM up to 0.31.0

A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamba_mixer2.py of the component Completions Request Handler. The manip…

▾ Twilightvllm-project · vLLMEPSS 0.30%via NVD

CVE-2026-100653Medium· 6.5PoC

▾ Twilightvllm-project · vllmEPSS 0.34%via NVD

vLLM is an inference and serving engine for large language models

vLLM is an inference and serving engine for large language models. In versions from 0.22.1 through 0.28.0, the operator-supplied model revision pin (--revision / --code-revision) is not propagated to several Hugging Face artifact loads f…

CVE-2026-92365Medium· 4.3⚖ disputed

▾ Sunlitvllm-project · vllmEPSS 0.52%via NVD

A vulnerability was found in vllm-project vllm up to 0.29.0

A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown functionality of the file vllm/v1/sample/thinking_budget_state.py. The manipulation results in inefficient algorithmic complexity. It is …

CVE-2026-92220Medium· 5.3⚖ disputed

▾ Sunlitvllm-project · vLLMEPSS 0.70%via NVD

A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0

A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.request_finished/MoRIIOConnectorWorker.get_finished/MoRIIOWrapper._handle_release_message of the file vllm/distributed/kv_tra…

CVE-2026-90878Medium· 4.3PoC

▾ Twilightvllm-project · vLLMEPSS 0.53%via NVD

A vulnerability was determined in vllm-project vLLM up to 0.27.1

A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chat_template causes resource co…

CVE-2026-90713Low· 3.3PoC