Product by vLLM
vLLM
94 known vulnerabilities in vLLM (vLLM), 0 of them actively exploited (CISA KEV).
Key figures
94
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-22778 | vLLM leaks a heap address when PIL throws an error | 9.8 | |
| High | CVE-2026-27893 | vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out | 8.8 | |
| Critical | CVE-2026-48746 | vLLM: OpenAI auth bypass | 9.1 | |
| Critical | CVE-2025-32444 | vLLM Vulnerable to Remote Code Execution via Mooncake Integration | 10.0 | |
| Critical | CVE-2024-11041 | Remote Code Execution in vllm-project/vllm | 9.8 | |
| High | CVE-2026-41523 | vLLM: Code Injection | 7.5 | |
| High | CVE-2026-93436 | vLLM through 0.29.0 Memory Exhaustion via Rejected Requests | 7.5 | |
| High | CVE-2026-94627 | vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision | 7.5 | |
| High | CVE-2026-94626 | vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_size | 7.5 | |
| High | CVE-2026-94624 | vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading Sessions | 7.5 | |
| High | CVE-2026-94622 | vLLM through 0.29.0 Denial of Service via Incomplete NIXL KV Transfer Metadata | 7.5 | |
| High | CVE-2026-94623 | vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure | 7.5 | |
| High | CVE-2026-93592 | vLLM before 0.28.0 Denial of Service via negative token ID | 7.5 | |
| Critical | CVE-2025-47277 | vLLM Allows Remote Code Execution via PyNcclPipe Communication Service | 9.8 | |
| High | CVE-2026-103241 | vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of service | 5.3 | |
| High | CVE-2025-62164 | VLLM deserialization vulnerability leading to DoS and potential RCE | 8.8 | |
| High | CVE-2026-100650 | vLLM before 0.29.0 Resource Exhaustion via Unbounded Media Materialization | 6.5 | |
| High | CVE-2026-37237 | vLLM: Denial of Service | 7.5 | |
| High | CVE-2026-5497 | Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllm | 7.5 | |
| Medium | CVE-2026-57173 | vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions | 6.5 | |
| High | CVE-2026-22807 | vLLM affected by RCE via auto_map dynamic module loading during model initialization | 8.8 | |
| High | CVE-2026-56340 | vLLM - Denial of Service via Unvalidated Multimodal Embeddings | 7.5 | |
| High | CVE-2026-55574 | vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends | 7.5 | |
| High | CVE-2026-54232 | vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile | 8.8 | |
| Medium | CVE-2026-69147 | vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation | 6.5 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 25sans-atrisk-mail,