---
id: CVE-2026-116176
title: >-
  vllm: vllm: Information disclosure via SSRF in X-Request-Id header
  (CVE-2026-116176)
summary: >-
  A flaw was found in vLLM. This vulnerability allows a remote attacker to
  trigger a Server-Side Request Forgery (SSRF) by submitting an HTTP request
  containing a crafted X-Request-Id header. Because the application extracts
  network addresse…
severity: high
cvss: 8.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L'
cvssSource: vendor
cwe: CWE-918
vendor: Red Hat
product: Red Hat AI Inference Server
affected:
  - ai_inference_server
  - enterprise_linux_ai_rhel_ai 3
  - openshift_ai_rhoai
published: '2026-10-25'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T05:51:40+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116176.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116176.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-116176'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2560404'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-116176'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-116176'
  - url: >-
      https://github.com/vllm-project/vllm/security/advisories/GHSA-vfp2-c8pq-v6h6
  - url: >-
      https://www.vulncheck.com/advisories/vllm-0.9.2-before-0.24.0-ssrf-via-x-request-id-in-p2pncclconnector
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
ingestedAt: '2026-10-25T22:08:29.946Z'
epss: 0.00318
epssPercentile: 0.24638
---

## Overview

A flaw was found in vLLM. This vulnerability allows a remote attacker to trigger a Server-Side Request Forgery (SSRF) by submitting an HTTP request containing a crafted X-Request-Id header. Because the application extracts network addresses from this header without validation, backend workers can be forced to initiate outbound network connections to an attacker-controlled server. This flaw can lead to severe information disclosure by leaking sensitive model cache data and internal identifiers, or result in a Denial of Service (DoS) by stalling worker processes.

## Vendor advisories

- **Red Hat VEX** · Important · affected: Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI) · no fix planned: Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI) · updated 2026-10-26 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116176.json)

**vllm: vllm: Information disclosure via SSRF in X-Request-Id header** — rated Important by Red Hat. Released 2026-10-25, updated 2026-10-26.

Affected:

- Red Hat AI Inference Server
- Red Hat Enterprise Linux AI (RHEL AI) 3
- Red Hat OpenShift AI (RHOAI)

No fix planned:

- Red Hat AI Inference Server
- Red Hat Enterprise Linux AI (RHEL AI) 3
- Red Hat OpenShift AI (RHOAI)

Not affected:

- Red Hat OpenShift AI (RHOAI)

## Remediation

Affected