GCD AI RADAR
products/vllm

vLLM

Filed as: vllm, vLLM AIBrix, vLLM Hardware Plugin for Intel Gaudi, vllm-metal

Records
114
Disclosed CVEs
113
Exploited (sev 3–4)
1
CISA KEV flagged
0

Newest record 2026-10-12 · 112 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)

Patch now: confirmed exploitation or KEV · 1

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

  1. 2026-09-30
    CVE-2026-103241
    CVE-2026-103241: Denial of service vulnerability in vLLM
    3 Exploiteddenial-of-service · vllm
    record AIR-2026-0220NVD ↗

Disclosures by month · last 24 months

Nov ’24111 disclosed · peak 28 in Sep ’26Oct ’26

Disclosed CVEs, no confirmed exploitation · 113

  1. 2026-10-12
    CVE-2026-109311
    CVE-2026-109311: vLLM audio transcription endpoint heap overflow vulnerability
    2 Disclosedheap-overflow · vllm
    record AIR-2026-0315NVD ↗
  2. 2026-10-06
    CVE-2026-105775
    CVE-2026-105775: Out-of-bounds read vulnerability in vLLM completions request handler
    2 Disclosedout-of-bounds-read
    record AIR-2026-0256NVD ↗
  3. 2026-10-06
    CVE-2026-105922
    Denial of Service Vulnerability in vLLM Penalty Handler
    2 Disclosedvllm · dos
    record AIR-2026-0254NVD ↗
  4. 2026-10-05
    CVE-2026-105758
    vLLM Denial of Service via Unbounded Video Sampler Frames
    2 Discloseddenial-of-service · vllm
    record AIR-2026-0240NVD ↗
  5. 2026-10-05
    CVE-2026-105752
    vLLM tool continuations drop cache_salt to restore prefix-cache oracle
    2 Disclosedside-channel · vllm
    record AIR-2026-0239NVD ↗
  6. 2026-10-05
    CVE-2026-105760
    vLLM GLMGA video sampling permits CPU and memory exhaustion
    2 Disclosedresource-exhaustion · vllm
    record AIR-2026-0238GitHub Advisory Database ↗
  7. 2026-10-05
    CVE-2026-105755
    vLLM flash late-interaction scoring permits cross-request integrity break
    2 Disclosedcache-poisoning · vllm
    record AIR-2026-0237GitHub Advisory Database ↗
  8. 2026-10-05
    CVE-2026-105756
    vLLM loose cache_salt validation causes engine crash on LMCache-MP
    2 Discloseddenial-of-service · vllm
    record AIR-2026-0236NVD ↗
  9. 2026-10-05
    CVE-2026-105757
    vLLM structured-output requests cause engine-fatal denial of service
    2 Discloseddenial-of-service · vllm
    record AIR-2026-0235GitHub Advisory Database ↗
  10. 2026-10-05
    CVE-2026-105759
    CVE-2026-105759: vLLM Prometheus Metrics Memory Exhaustion Vulnerability
    2 Disclosedvllm · memory-exhaustion
    record AIR-2026-0233NVD ↗
  11. 2026-10-05
    CVE-2026-105753
    CVE-2026-105753: vLLM Multimodal IPC Cache Desync Denial of Service
    2 Disclosedvllm · dos
    record AIR-2026-0232NVD ↗
  12. 2026-10-05
    CVE-2026-105754
    CVE-2026-105754: vLLM disaggregated transport trusts caller-supplied features
    2 Disclosedvllm · inference-server
    record AIR-2026-0229GitHub Advisory Database ↗
  13. 2026-09-26
    CVE-2026-100648
    vLLM Audio Size Enforcement Bypass Permits Resource Exhaustion
    2 Disclosedresource_exhaustion · multimodal
    record AIR-2026-0214NVD ↗
  14. 2026-09-26
    CVE-2026-100649
    vLLM Decoder Allocation Resource Limit Bypass Causes GPU Memory Exhaustion
    2 Disclosedresource_exhaustion · gpu_memory
    record AIR-2026-0213NVD ↗
  15. 2026-09-26
    CVE-2026-100652
    vLLM Stop Token ID Boundary Validation Flaw Causes Service Crash
    2 Discloseddenial_of_service · input_validation
    record AIR-2026-0211NVD ↗
  16. 2026-09-26
    CVE-2026-100647
    CVE-2026-100647: vLLM denial-of-service vulnerability in cache_salt parameter
    2 Disclosedvllm · denial-of-service
    record AIR-2026-0209NVD ↗
  17. 2026-09-26
    CVE-2026-100653
    CVE-2026-100653: vLLM revision pin failure during Hugging Face artifact loads
    2 Disclosedvllm · inference-server
    record AIR-2026-0205NVD ↗
  18. 2026-09-26
    CVE-2026-100651
    CVE-2026-100651: vLLM omits prompt-length validation on disaggregated endpoint
    2 Disclosedvllm · input-validation
    record AIR-2026-0204NVD ↗
  19. 2026-09-26
    CVE-2026-100650
    CVE-2026-100650: vLLM materializes remote media before size enforcement
    2 Disclosedvllm · resource-exhaustion
    record AIR-2026-0203NVD ↗
  20. 2026-09-26
    CVE-2026-100654
    CVE-2026-100654: vLLM flawed stop_token_ids validation causes CUDA error
    2 Disclosedvllm · dos
    record AIR-2026-0200NVD ↗
  21. 2026-09-21
    CVE-2026-94626
    CVE-2026-94626: vLLM Memory Exhaustion via Unvalidated tp_size Parameter
    2 Disclosedmemory-exhaustion · vllm
    record AIR-2026-0159NVD ↗
  22. 2026-09-21
    CVE-2026-94625
    CVE-2026-94625: vLLM Resource Exhaustion in MooncakeConnector Transfer Placeholders
    2 Disclosedresource-exhaustion · vllm
    record AIR-2026-0158NVD ↗
  23. 2026-09-21
    CVE-2026-94622
    CVE-2026-94622: vLLM Denial of Service in NIXL Connector Metadata Handling
    2 Discloseddenial-of-service · vllm
    record AIR-2026-0157NVD ↗
  24. 2026-09-21
    CVE-2026-94627
    vLLM Mooncake connector GPU memory exhaustion vulnerability
    2 Disclosedvllm · memory_exhaustion
    record AIR-2026-0156NVD ↗
  25. 2026-09-21
    CVE-2026-94624
    vLLM P2P KV offloading denial of service vulnerability
    2 Disclosedvllm · denial_of_service
    record AIR-2026-0155NVD ↗
  26. 2026-09-21
    CVE-2026-94623
    vLLM NIXL connector denial of service vulnerability
    2 Disclosedvllm · denial_of_service
    record AIR-2026-0154NVD ↗
  27. 2026-09-19
    CVE-2026-93989
    vLLM bad_words token index validation flaw in SamplingParams
    2 Disclosedvllm · infra_vuln
    record AIR-2026-0152NVD ↗
  28. 2026-09-18
    CVE-2026-93840
    CVE-2026-93840: Validation flaw in vLLM allowed_token_ids handling
    2 Disclosedinput-validation · vllm
    record AIR-2026-0151NVD ↗
  29. 2026-09-18
    CVE-2026-93592
    CVE-2026-93592: Input validation flaw in vLLM embeddings and pooling endpoints
    2 Discloseddenial-of-service · vllm
    record AIR-2026-0150NVD ↗
  30. 2026-09-18
    CVE-2026-93841
    CVE-2026-93841: Memory corruption in vLLM Triton bincount kernel
    2 Disclosedmemory-corruption · vllm
    record AIR-2026-0149NVD ↗
  31. 2026-09-17
    CVE-2026-93436
    CVE-2026-93436: Memory exhaustion vulnerability in vLLM inference server
    2 Disclosedvllm · memory-exhaustion
    record AIR-2026-0144NVD ↗
  32. 2026-09-16
    CVE-2026-92220
    vLLM MoRIIO Acknowledgement Handler Resource Consumption Vulnerability
    2 Disclosedvllm · denial-of-service
    record AIR-2026-1391NVD ↗
  33. 2026-09-16
    CVE-2026-92365
    CVE-2026-92365: Algorithmic complexity vulnerability in vLLM
    2 Disclosedvllm · denial-of-service
    record AIR-2026-0142NVD ↗
  34. 2026-09-16
    CVE-2026-57173
    CVE-2026-57173: vLLM audio input handling out-of-memory flaw
    2 Disclosedvllm · dos
    record AIR-2026-0140NVD ↗
  35. 2026-09-16
    CVE-2026-69147
    CVE-2026-69147: vLLM video backend GPU memory allocation flaw
    2 Disclosedvllm · denial-of-service
    record AIR-2026-0138NVD ↗
  36. 2026-09-15
    CVE-2026-90878
    CVE-2026-90878: vLLM Jinja Template Rendering Resource Consumption Vulnerability
    2 Disclosedvllm · infra_vuln
    record AIR-2026-1386NVD ↗
  37. 2026-09-14
    CVE-2026-90713
    CVE-2026-90713: Denial of service vulnerability in vLLM
    2 Discloseddenial-of-service · vllm
    record AIR-2026-1379NVD ↗
  38. 2026-09-12
    CVE-2026-90555
    CVE-2026-90555: vLLM Audio Transcription Memory Exhaustion
    2 Discloseddos · vllm
    record AIR-2026-1376NVD ↗
  39. 2026-09-12
    CVE-2026-90553
    CVE-2026-90553: vLLM Remote Code Execution Vulnerability
    2 Disclosedrce · vllm
    record AIR-2026-1375NVD ↗
  40. 2026-09-12
    CVE-2026-90554
    CVE-2026-90554: vLLM audio decode size limit vulnerability
    2 Disclosedvllm · denial-of-service
    record AIR-2026-0107NVD ↗
  41. 2026-08-28
    CVE-2026-37237
    CVE-2026-37237: vLLM Unbounded Media Fetching Memory Exhaustion
    2 Disclosedvllm · denial-of-service · memory-exhaustion
    record AIR-2026-0096NVD ↗
  42. 2026-08-25
    CVE-2026-78684
    CVE-2026-78684: vLLM DeepStream Decode Path Resource Control Bypass
    2 Disclosedvllm · denial-of-service
    record AIR-2026-0094NVD ↗
  43. 2026-08-17
    CVE-2026-73560
    CVE-2026-73560: vLLM multimodal processor vulnerable to arbitrary file reads and SSRF
    2 Disclosedvllm · ssrf · arbitrary-file-read
    record AIR-2026-0086NVD ↗
  44. 2026-08-17
    CVE-2026-71486
    CVE-2026-71486: vLLM derender endpoints vulnerable to resource exhaustion
    2 Disclosedvllm · denial-of-service
    record AIR-2026-0083NVD ↗
  45. 2026-08-13
    CVE-2026-73558
    CVE-2026-73558: vLLM data leakage vulnerability in activation kernels
    2 Disclosedvllm
    record AIR-2026-0081NVD ↗
  46. 2026-08-13
    CVE-2026-73556
    CVE-2026-73556: vLLM denial of service via regex structured output
    2 Disclosedvllm
    record AIR-2026-0079NVD ↗
  47. 2026-08-13
    CVE-2026-73557
    CVE-2026-73557: vLLM prompt embed check bypass vulnerability
    2 Disclosedvllm
    record AIR-2026-0078NVD ↗
  48. 2026-08-13
    CVE-2026-73559
    CVE-2026-73559: Denial of service vulnerability in vLLM completion prompt preprocessing
    2 Disclosedvllm · denial-of-service · resource-exhaustion
    record AIR-2026-0077NVD ↗
  49. 2026-08-13
    CVE-2026-73555
    CVE-2026-73555: Information disclosure vulnerability in vLLM request validation handling
    2 Disclosedvllm · information-disclosure
    record AIR-2026-0076NVD ↗
  50. 2026-08-11
    CVE-2026-27765
    CVE-2026-27765: Input validation flaw in vLLM Intel Gaudi plugin allows denial of service
    2 Disclosedvllm · denial-of-service
    record AIR-2026-0073NVD ↗
  51. 2026-07-06
    CVE-2026-55514
    vLLM denial of service via prompt embeds on M-RoPE models
    2 Disclosedvllm · dos
    record AIR-2026-0813NVD ↗
  52. 2026-07-06
    CVE-2026-55574
    vLLM ReDoS vulnerability in structured outputs regex compilation
    2 Disclosedvllm · redos
    record AIR-2026-0811NVD ↗
  53. 2026-07-06
    CVE-2026-55646
    CVE-2026-55646: vLLM speech-to-text enforces size limit after full file read
    2 Disclosedvllm · denial-of-service
    record AIR-2026-0809NVD ↗
  54. 2026-07-06
    CVE-2026-54234
    CVE-2026-54234: vLLM remote denial of service via invalid recovered token reinjection
    2 Disclosedvllm · denial-of-service
    record AIR-2026-0808NVD ↗
  55. 2026-06-22
    CVE-2026-54232
    CVE-2026-54232: Dependency confusion flaw in vLLM Dockerfile
    2 Discloseddependency_confusion · supply_chain
    record AIR-2026-1122NVD ↗
  56. 2026-06-20
    CVE-2025-71379
    CVE-2025-71379: vLLM regular expression denial of service vulnerabilities
    2 Disclosedredos · denialofservice
    record AIR-2026-0023NVD ↗
  57. 2026-06-17
    CVE-2026-12491
    CVE-2026-12491: vLLM flawed image metadata handling leads to input distortion
    2 Disclosedvllm · data-integrity
    record AIR-2026-1114NVD ↗
  58. 2026-06-17
    CVE-2026-54236
    CVE-2026-54236: vLLM Incomplete Fix Leaks PIL Repr Addresses
    2 Disclosedvllm · information-disclosure
    record AIR-2026-0770GitHub Advisory Database ↗
  59. 2026-06-17
    CVE-2026-54235
    CVE-2026-54235: vLLM temperature validation bypass for NaN and Infinity values
    2 Disclosedvllm · denial-of-service
    record AIR-2026-0766GitHub Advisory Database ↗
  60. 2026-06-17
    CVE-2026-53923
    CVE-2026-53923: vLLM GGUF Dequantization Kernel Information Disclosure
    2 Disclosedinformation_disclosure · vllm
    record AIR-2026-0761GitHub Advisory Database ↗
  61. 2026-06-17
    CVE-2026-54233
    CVE-2026-54233: vLLM OOM Denial of Service via Audio Decompression
    2 Discloseddos · vllm
    record AIR-2026-0760GitHub Advisory Database ↗
  62. 2026-06-16
    CVE-2026-48746
    CVE-2026-48746: vLLM OpenAI API Authentication Bypass
    2 Disclosedauth-bypass · vllm
    record AIR-2026-0740GitHub Advisory Database ↗
  63. 2026-06-16
    CVE-2026-41523
    CVE-2026-41523: vLLM Security Check Bypass via assert Statement
    2 Disclosedrce · assert-bypass
    record AIR-2026-0736GitHub Advisory Database ↗
  64. 2026-06-11
    CVE-2026-5497
    CVE-2026-5497: vLLM vulnerable to OOM Denial of Service
    2 Discloseddos · vllm
    record AIR-2026-0727GitHub Advisory Database ↗
  65. 2026-06-10
    CVE-2026-47155
    CVE-2026-47155: vLLM artifact pin decay allows loading unpinned code and weights
    2 Disclosedvllm
    record AIR-2026-0725GitHub Advisory Database ↗
  66. 2026-05-28
    CVE-2026-4944
    vLLM Hardcoded Trust Remote Code Parameter Leads to RCE
    2 Disclosedrce · supply_chain
    record AIR-2026-1097NVD ↗
  67. 2026-05-26
    CVE-2026-9540
    vLLM vulnerable to denial of service via OpenAI-compatible serving path
    2 Discloseddos
    record AIR-2026-0718GitHub Advisory Database ↗
  68. 2026-05-22
    CVE-2026-5817
    CVE-2026-5817: Docker Model Runner vllm-metal arbitrary code execution vulnerability
    2 Disclosedremote-code-execution · trust-remote-code · supply-chain
    record AIR-2026-1090NVD ↗
  69. 2026-05-06
    CVE-2026-44223
    vLLM speculative decoding crashes server via penalty parameters
    2 Discloseddos · vllm
    record AIR-2026-0618GitHub Advisory Database ↗
  70. 2026-05-05
    CVE-2026-44222
    CVE-2026-44222: vLLM vulnerable to remote DoS via special-token placeholders
    2 Disclosedvllm · dos
    record AIR-2026-0616GitHub Advisory Database ↗
  71. 2026-04-27
    CVE-2026-7141
    CVE-2026-7141: vLLM Uninitialized Resource Vulnerability
    2 Discloseduninitialized_resource
    record AIR-2026-0602GitHub Advisory Database ↗
  72. 2026-04-03
    CVE-2026-34755
    CVE-2026-34755: vLLM Denial of Service via Unbounded Base64 Frames
    2 Discloseddos · vllm
    record AIR-2026-0555GitHub Advisory Database ↗
  73. 2026-04-03
    CVE-2026-34753
    CVE-2026-34753: vLLM Server-Side Request Forgery in batch runner
    2 Disclosedssrf
    record AIR-2026-0553GitHub Advisory Database ↗
  74. 2026-04-03
    CVE-2026-34756
    CVE-2026-34756: vLLM Unauthenticated Denial of Service via Parameter
    2 Disclosedvllm · dos
    record AIR-2026-0549GitHub Advisory Database ↗
  75. 2026-04-02
    CVE-2026-34760
    vLLM audio downmixing differential enables moderation bypass
    2 Disclosedvllm · librosa
    record AIR-2026-0810NVD ↗
  76. 2026-03-27
    CVE-2026-27893
    CVE-2026-27893: vLLM Hardcoded Trust Override Enables RCE
    2 Disclosedvllm · rce
    record AIR-2026-0529GitHub Advisory Database ↗
  77. 2026-03-09
    CVE-2026-25960
    CVE-2026-25960: vLLM has SSRF Protection Bypass
    2 Disclosedssrf · vllm
    record AIR-2026-0497GitHub Advisory Database ↗
  78. 2026-02-02
    CVE-2026-22778
    CVE-2026-22778: vLLM remote code execution via video processing
    2 Disclosedrce · heap-overflow
    record AIR-2026-0444GitHub Advisory Database ↗
  79. 2026-01-27
    CVE-2026-24779
    CVE-2026-24779: vLLM MediaConnector vulnerable to Server-Side Request Forgery
    2 Disclosedssrf
    record AIR-2026-0441NVD ↗
  80. 2026-01-21
    CVE-2026-22807
    CVE-2026-22807: vLLM RCE via auto_map Dynamic Module Loading
    2 Disclosedrce · infra_vuln
    record AIR-2026-0437GitHub Advisory Database ↗
  81. 2026-01-10
    CVE-2026-22773
    CVE-2026-22773: vLLM Denial of Service via Idefics3 Vision Model Payload
    2 Discloseddos
    record AIR-2026-0432NVD ↗
  82. 2026-01-08
    CVE-2026-56340
    CVE-2026-56340: vLLM introduces enhanced protection for sparse tensor validation DoS
    2 Discloseddos · vllm
    record AIR-2026-0429GitHub Advisory Database ↗
  83. 2025-12-01
    CVE-2025-66448
    CVE-2025-66448: vLLM remote code execution vulnerability in config loading
    2 Disclosedrce
    record AIR-2025-0381NVD ↗
  84. 2025-11-20
    CVE-2025-62164
    CVE-2025-62164: vLLM memory corruption via unvalidated prompt-embedding tensors
    2 Disclosedvllm · memory-corruption · dos
    record AIR-2025-0521GitHub Advisory Database ↗
  85. 2025-11-20
    CVE-2025-62426
    CVE-2025-62426: vLLM Vulnerable to DoS via Chat Completion Request Parameters
    2 Discloseddos · vllm
    record AIR-2025-0376GitHub Advisory Database ↗
  86. 2025-11-20
    CVE-2025-62372
    CVE-2025-62372: vLLM vulnerable to denial of service via multimodal embedding inputs
    2 Disclosedvllm · dos
    record AIR-2025-0374GitHub Advisory Database ↗
  87. 2025-10-07
    CVE-2025-61620
    CVE-2025-61620: vLLM resource exhaustion via malicious Jinja template
    2 Discloseddos · vllm
    record AIR-2025-0353GitHub Advisory Database ↗
  88. 2025-10-07
    CVE-2025-59425
    CVE-2025-59425: vLLM vulnerable to timing attack at bearer auth
    2 Disclosedtiming-attack · vllm
    record AIR-2025-0352GitHub Advisory Database ↗
  89. 2025-10-07
    CVE-2025-6242
    CVE-2025-6242: vLLM vulnerable to SSRF through MediaConnector
    2 Disclosedssrf · vllm
    record AIR-2025-0351GitHub Advisory Database ↗
  90. 2025-08-21
    CVE-2025-48956
    CVE-2025-48956: vLLM API Denial of Service via Large HTTP Headers
    2 Discloseddos
    record AIR-2025-0327GitHub Advisory Database ↗
  91. 2025-08-21
    CVE-2025-9141
    CVE-2025-9141: vLLM RCE Vulnerability in Qwen3-Coder Tool Parser
    2 Disclosedrce
    record AIR-2025-0326GitHub Advisory Database ↗
  92. 2025-05-28
    CVE-2025-48943
    CVE-2025-48943: vLLM Denial of Service via Invalid Regex Output
    2 Disclosedvllm · dos
    record AIR-2025-0292GitHub Advisory Database ↗
  93. 2025-05-28
    CVE-2025-48942
    CVE-2025-48942: vLLM Denial of Service via Invalid JSON Schema
    2 Disclosedvllm · dos
    record AIR-2025-0291GitHub Advisory Database ↗
  94. 2025-05-28
    CVE-2025-48887
    CVE-2025-48887: vLLM ReDoS Vulnerability in pythonic_tool_parser
    2 Disclosedvllm · redos
    record AIR-2025-0290GitHub Advisory Database ↗
  95. 2025-05-28
    vLLM Regular Expression Denial of Service
    2 Disclosedghsa-j828-28rj-hfhp · vllm · redos
    record AIR-2025-0289GitHub Advisory Database ↗
  96. 2025-05-28
    CVE-2025-46722
    CVE-2025-46722: vLLM MultiModalHasher Image Hashing Weakness
    2 Disclosedvllm · hash-collision
    record AIR-2025-0288GitHub Advisory Database ↗
  97. 2025-05-28
    CVE-2025-46570
    CVE-2025-46570: Timing Side-Channel in vLLM Prefix Caching
    2 Disclosedside-channel · vllm
    record AIR-2025-0287GitHub Advisory Database ↗
  98. 2025-05-28
    CVE-2025-48944
    CVE-2025-48944: vLLM Tool Schema Allows DoS via Malformed Fields
    2 Discloseddos · vllm
    record AIR-2025-0286GitHub Advisory Database ↗
  99. 2025-05-20
    CVE-2025-47277
    CVE-2025-47277: vLLM Remote Code Execution via PyNcclPipe
    2 Disclosedrce · vllm
    record AIR-2025-0285GitHub Advisory Database ↗
  100. 2025-05-06
    CVE-2025-30165
    CVE-2025-30165: Remote Code Execution in vLLM Multi-Node Cluster Configuration
    2 Disclosedrce · vllm
    record AIR-2025-0280GitHub Advisory Database ↗
  101. 2025-04-29
    CVE-2025-46560
    CVE-2025-46560: vLLM vulnerable to denial of service via quadratic time complexity
    2 Discloseddos · vllm
    record AIR-2025-0278GitHub Advisory Database ↗
  102. 2025-04-29
    CVE-2025-32444
    CVE-2025-32444: vLLM Remote Code Execution via Mooncake Integration
    2 Disclosedrce · zeromq · pickle
    record AIR-2025-0277GitHub Advisory Database ↗
  103. 2025-04-29
    CVE-2025-30202
    CVE-2025-30202: Data Exposure via ZeroMQ in Multi-Node vLLM Deployment
    2 Disclosedzeromq · data-exposure
    record AIR-2025-0276GitHub Advisory Database ↗
  104. 2025-04-15
    vLLM Vulnerable to Denial of Service by Abusing XGrammar Cache
    2 Discloseddenial-of-service · xgrammar
    record AIR-2025-0271GitHub Advisory Database ↗
  105. 2025-03-20
    CVE-2024-11041
    CVE-2024-11041: vLLM Deserialization of Untrusted Data vulnerability
    2 Disclosedrce · deserialization
    record AIR-2025-0245GitHub Advisory Database ↗
  106. 2025-03-20
    CVE-2024-9053
    CVE-2024-9053: vLLM Pickle Deserialization Remote Code Execution
    2 Discloseddeserialization · remote-code-execution
    record AIR-2025-0243GitHub Advisory Database ↗
  107. 2025-03-20
    CVE-2024-9052
    CVE-2024-9052: vLLM Deserialization Vulnerability in GroupCoordinator
    2 Disclosedrce · deserialization
    record AIR-2025-0210GitHub Advisory Database ↗
  108. 2025-03-19
    CVE-2025-29770
    CVE-2025-29770: vLLM denial of service via outlines unbounded cache
    2 Discloseddenial-of-service · cache
    record AIR-2025-0207GitHub Advisory Database ↗
  109. 2025-03-19
    CVE-2025-29783
    CVE-2025-29783: vLLM allows remote code execution via Mooncake integration
    2 Disclosedrce · deserialization
    record AIR-2025-0206GitHub Advisory Database ↗
  110. 2025-03-04
    CVE-2025-1953
    CVE-2025-1953: Insufficiently random values in vLLM AIBrix prefix caching
    2 Disclosedprefix_caching
    record AIR-2025-0398NVD ↗
  111. 2025-02-06
    CVE-2025-25183
    CVE-2025-25183: vLLM vulnerable to hash collisions in prefix cache
    2 Disclosedvllm · cache-collision
    record AIR-2025-0197GitHub Advisory Database ↗
  112. 2024-09-17
    CVE-2024-8768
    CVE-2024-8768: vLLM denial of service vulnerability
    2 Discloseddenial-of-service · vllm
    record AIR-2024-0168GitHub Advisory Database ↗
  113. 2024-09-17
    CVE-2024-8939
    CVE-2024-8939: vLLM Denial of Service via best_of parameter
    2 Discloseddenial-of-service · vllm
    record AIR-2024-0166GitHub Advisory Database ↗

This page lists what has been reported, not what to do about it. Versions and fixes are in each linked advisory; check the vendor’s own advisory before acting.