{"id":"CVE-2026-116176","title":"vllm: vllm: Information disclosure via SSRF in X-Request-Id header (CVE-2026-116176)","summary":"A flaw was found in vLLM. This vulnerability allows a remote attacker to trigger a Server-Side Request Forgery (SSRF) by submitting an HTTP request containing a crafted X-Request-Id header. Because the application extracts network addresse…","severity":"high","cvss":8.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","cvssSource":"vendor","cwe":"CWE-918","vendor":"Red Hat","product":"Red Hat AI Inference Server","affected":["ai_inference_server","enterprise_linux_ai_rhel_ai 3","openshift_ai_rhoai"],"published":"2026-10-25","updated":"2026-10-26","sourceUpdated":"2026-10-26T05:51:40+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116176.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116176.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-116176"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2560404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-116176"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116176"},{"url":"https://github.com/vllm-project/vllm/security/advisories/GHSA-vfp2-c8pq-v6h6"},{"url":"https://www.vulncheck.com/advisories/vllm-0.9.2-before-0.24.0-ssrf-via-x-request-id-in-p2pncclconnector"}],"tags":["csaf","vex","red-hat","cve.org"],"ingestedAt":"2026-10-25T22:08:29.946Z","epss":0.00318,"epssPercentile":0.24638,"slug":"CVE-2026-116176","body":"## Overview\n\nA flaw was found in vLLM. This vulnerability allows a remote attacker to trigger a Server-Side Request Forgery (SSRF) by submitting an HTTP request containing a crafted X-Request-Id header. Because the application extracts network addresses from this header without validation, backend workers can be forced to initiate outbound network connections to an attacker-controlled server. This flaw can lead to severe information disclosure by leaking sensitive model cache data and internal identifiers, or result in a Denial of Service (DoS) by stalling worker processes.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Important · affected: Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI) · no fix planned: Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI) · updated 2026-10-26 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116176.json)\n\n**vllm: vllm: Information disclosure via SSRF in X-Request-Id header** — rated Important by Red Hat. Released 2026-10-25, updated 2026-10-26.\n\nAffected:\n\n- Red Hat AI Inference Server\n- Red Hat Enterprise Linux AI (RHEL AI) 3\n- Red Hat OpenShift AI (RHOAI)\n\nNo fix planned:\n\n- Red Hat AI Inference Server\n- Red Hat Enterprise Linux AI (RHEL AI) 3\n- Red Hat OpenShift AI (RHOAI)\n\nNot affected:\n\n- Red Hat OpenShift AI (RHOAI)\n\n## Remediation\n\nAffected","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":45.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}