VL
Vendor
vllm-project
98
CVEs
0
On KEV
38
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115918 New | VL vllm vllm-project | 6.5 | Oct 26 | vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs |
| CVE-2026-115917 New | VL vllm vllm-project | 3.4 | Oct 26 | vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server |
| CVE-2026-115916 New | VL vllm vllm-project | 6.5 | Oct 26 | vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS) |
| CVE-2026-115915 New | VL vllm vllm-project | 8.1 | Oct 26 | vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE |
| CVE-2026-115914 New | VL vllm vllm-project | 6.5 | Oct 26 | vLLM DeepSeek-OCR image processing vulnerable to denial of service |
| CVE-2026-115913 New | VL vllm vllm-project | 6.5 | Oct 26 | vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine |
| CVE-2026-115912 New | VL vllm vllm-project | 7.5 | Oct 26 | vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled |
| CVE-2026-115911 New | VL vllm vllm-project | 6.5 | Oct 26 | vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool |
| CVE-2026-116181 New | VL vllm vllm-project | 6.5 | Oct 25 | vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids |
| CVE-2026-116180 New | VL vllm vllm-project | 7.7 | Oct 25 | vLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensors |
| CVE-2026-116179 New | VL vllm vllm-project | 7.5 | Oct 25 | vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override |
| CVE-2026-116178 New | VL vllm vllm-project | 5.9 | Oct 25 | vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders |
| CVE-2026-116177 New | VL vllm vllm-project | 7.5 | Oct 25 | vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass |
| CVE-2026-116176 New | VL vllm vllm-project | 8.2 | Oct 25 | vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector |
| CVE-2026-116175 New | VL vllm vllm-project | 6.5 | Oct 25 | vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions |
| CVE-2026-116174 New | VL vllm vllm-project | 5.9 | Oct 25 | vLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate |
| CVE-2026-116173 New | VL vllm vllm-project | 5.9 | Oct 25 | vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_ids |
| CVE-2026-116172 New | VL vllm vllm-project | 5.9 | Oct 25 | vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n |
| CVE-2026-114055 | VL vllm vllm-project | 7.5 | Oct 21 | vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs |
| CVE-2026-114054 | VL vllm vllm-project | 6.5 | Oct 21 | vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keys |
| CVE-2026-114053 | VL vllm vllm-project | 8.1 | Oct 21 | vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision |
| CVE-2026-114052 | VL vllm vllm-project | 7.5 | Oct 21 | vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargs |
| CVE-2026-114051 | VL vllm vllm-project | 7.5 | Oct 21 | vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generate |
| CVE-2026-114050 | VL vllm vllm-project | 7.5 | Oct 21 | vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUID |
| CVE-2026-114049 | VL vllm vllm-project | 3.7 | Oct 21 | vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condense |
| CVE-2026-109311 | VL vllm vllm-project | 6.5 | Oct 12 | vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Transcription Upload |
| CVE-2026-105922 | VL vLLM vllm-project | 4.3 | Oct 6 | vllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of service |
| CVE-2026-105775 | VL vLLM vllm-project | 4.3 | Oct 6 | vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds |
| CVE-2026-105760 | VL vllm vllm-project | 5.3 | Oct 5 | vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion |
| CVE-2026-105759 | VL vllm vllm-project | 7.5 | Oct 5 | vLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service) |
| CVE-2026-105758 | VL vllm vllm-project | 5.3 | Oct 5 | vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach |
| CVE-2026-105757 | VL vllm vllm-project | 6.5 | Oct 5 | vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites) |
| CVE-2026-105756 | VL vllm vllm-project | 6.5 | Oct 5 | vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service |
| CVE-2026-105755 | VL vllm vllm-project | 4.2 | Oct 5 | vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank` |
| CVE-2026-105754 | VL vllm vllm-project | 6.5 | Oct 5 | vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features |
| CVE-2026-105753 | VL vllm vllm-project | 6.5 | Oct 5 | vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core |
| CVE-2026-105752 | VL vllm vllm-project | 3.1 | Oct 5 | vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle |
| CVE-2026-103241 | VL vLLM vllm-project | 7.5 | Sep 30 | vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of service |
| CVE-2026-100654 | VL vllm vllm-project | 6.5 | Sep 26 | vLLM before 0.29.0 Denial of Service via out-of-range stop_token_ids |
| CVE-2026-100653 | VL vllm vllm-project | 6.5 | Sep 26 | vLLM 0.22.1 before 0.28.0 Incomplete Artifact Pin Propagation |
| CVE-2026-100652 | VL vllm vllm-project | 7.5 | Sep 26 | vLLM 0.22.0 through 0.23.0 Denial of Service via stop_token_ids |
| CVE-2026-100651 | VL vllm vllm-project | 6.5 | Sep 26 | vllm before 0.29.0 Denial of Service via Decoder Prompt Length Bypass |
| CVE-2026-100650 | VL vllm vllm-project | 6.5 | Sep 26 | vLLM before 0.29.0 Resource Exhaustion via Unbounded Media Materialization |
| CVE-2026-100649 | VL vllm vllm-project | 5.3 | Sep 26 | vLLM before 0.29.0 Resource Limit Bypass via Sampler Subclass |
| CVE-2026-100648 | VL vllm vllm-project | 5.3 | Sep 26 | vllm before 0.29.0 Uncontrolled Resource Consumption via Audio Decoding |
| CVE-2026-100647 | VL vllm vllm-project | 7.5 | Sep 26 | vLLM before 0.29.0 CPU Exhaustion via unbounded cache_salt |
| CVE-2026-94627 | VL vllm vllm-project | 7.5 | Sep 21 | vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision |
| CVE-2026-94626 | VL vllm vllm-project | 7.5 | Sep 21 | vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_size |
| CVE-2026-94625 | VL vllm vllm-project | 5.3 | Sep 21 | vLLM through 0.29.0 Resource Exhaustion via Ownerless Mooncake Transfer Placeholders |
| CVE-2026-94624 | VL vllm vllm-project | 7.5 | Sep 21 | vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading Sessions |
| CVE-2026-94623 | VL vllm vllm-project | 7.5 | Sep 21 | vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure |
| CVE-2026-94622 | VL vllm vllm-project | 7.5 | Sep 21 | vLLM through 0.29.0 Denial of Service via Incomplete NIXL KV Transfer Metadata |
| CVE-2026-93989 | VL vllm vllm-project | 4.3 | Sep 19 | vLLM through 0.29.0 Cross-Request Logits Corruption via bad_words |
| CVE-2026-93841 | VL vllm vllm-project | 5.3 | Sep 18 | vLLM through 0.29.0 Adjacent-Request Sampler State Corruption via Unvalidated Prompt Token IDs |
| CVE-2026-93840 | VL vllm vllm-project | 5.3 | Sep 18 | vLLM before 0.29.0 Cross-Request Logits Corruption via allowed_token_ids |
| CVE-2026-93592 | VL vllm vllm-project | 7.5 | Sep 18 | vLLM before 0.28.0 Denial of Service via negative token ID |
| CVE-2026-93436 | VL vllm vllm-project | 7.5 | Sep 17 | vLLM through 0.29.0 Memory Exhaustion via Rejected Requests |
| CVE-2026-69147 | VL vllm vllm-project | 6.5 | Sep 16 | vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation |
| CVE-2026-57173 | VL vllm vllm-project | 6.5 | Sep 16 | vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions |
| CVE-2026-92365 | VL vllm vllm-project | 4.3 | Sep 16 | vllm-project vllm thinking_budget_state.py algorithmic complexity |