{
 "id": "AIR-2026-0441",
 "slug": "cve-2026-24779-vllm-mediaconnector-vulnerable-to-server-side",
 "title": "CVE-2026-24779: vLLM MediaConnector vulnerable to Server-Side Request Forgery",
 "summary": "A server-side request forgery vulnerability exists in vLLM due to inconsistent parsing of backslashes in URL handling libraries. Attackers can bypass host name restrictions to force the server to make requests to internal network resources.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "vLLM"
 ],
 "incident_date": "2026-01-28",
 "incident_date_precision": "day",
 "first_reported": "2026-01-27",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24779",
   "publisher": "NVD",
   "title": "CVE-2026-24779: vLLM is an inference and serving engine for large language models (LLMs).",
   "published_at": "2026-01-27"
  },
  {
   "url": "https://github.com/advisories/GHSA-qh4c-xf7m-gxfc",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-24779: vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector",
   "published_at": "2026-01-28"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-24779",
  "ssrf"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}