{
 "id": "AIR-2025-0288",
 "slug": "cve-2025-46722-vllm-multimodalhasher-image-hashing-weakness",
 "title": "CVE-2025-46722: vLLM MultiModalHasher Image Hashing Weakness",
 "summary": "An image hashing weakness in vLLM allows image hash collisions due to missing dimensions in the serialized byte sequence. This can lead to incorrect cache hits and potential data integrity issues.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "vLLM"
 ],
 "incident_date": "2025-05-28",
 "incident_date_precision": "day",
 "first_reported": "2025-05-28",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-c65p-x677-fgj6",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2025-46722: vLLM has a Weakness in MultiModalHasher Image Hashing Implementation",
   "published_at": "2025-05-28"
  },
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46722",
   "publisher": "NVD",
   "title": "CVE-2025-46722: vLLM is an inference and serving engine for large language models (LLMs).",
   "published_at": "2025-05-29"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2025-46722",
  "vllm",
  "hash-collision"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}
