vLLM records
93 published records for vendor vllm.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 1.1%
- Pre-auth RCE
- 10
- With a fix record
- 96.8%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-400 Uncontrolled Resource Consumption15
- CWE-770 Allocation of Resources Without Limits or Throttling10
- CWE-20 Improper Input Validation10
- CWE-129 Improper Validation of Array Index7
- CWE-502 Deserialization of Untrusted Data6
- CWE-918 Server-Side Request Forgery (SSRF)4
The weakness classes this vendor ships most often: where to look.
CWEAll records
93 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
44Plan | CVE-2026-22778Weaponized | vLLM leaks a heap address when PIL throws an errorvllm · vllm · CWE-532 | Critical9.8 | — | 16.6% | Feb 2, 2026 |
40Plan | CVE-2025-32444No exploit | vLLM Vulnerable to Remote Code Execution via Mooncake Integrationvllm · vllm · CWE-502 | Critical9.8 | — | 1.7% | Apr 29, 2025 |
40Plan | CVE-2024-11041No exploit | Remote Code Execution in vllm-project/vllmvllm · vllm · CWE-502 | Critical9.8 | — | 1.7% | Mar 20, 2025 |
39Monitor | CVE-2025-47277No exploit | vLLM Allows Remote Code Execution via PyNcclPipe Communication Servicevllm · vllm · CWE-502 | Critical9.8 | — | 0.9% | May 20, 2025 |
39Monitor | CVE-2026-22807Proof of concept | vLLM affected by RCE via auto_map dynamic module loading during model initializationvllm · vllm · CWE-94 | Critical9.8 | — | 0.8% | Jan 21, 2026 |
39Monitor | CVE-2026-25960No exploit | SSRF Protection Bypass in vLLMvllm · vllm · CWE-918 | Critical9.8 | — | 0.7% | Mar 9, 2026 |
36Monitor | CVE-2026-27893No exploit | vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-outvllm · vllm · CWE-693 | High8.8 | — | 1.8% | Mar 26, 2026 |
36Monitor | CVE-2026-48746No exploit | vLLM: OpenAI auth bypassvllm · vllm · CWE-444 | Critical9.1 | — | 1.1% | Jun 22, 2026 |
36Monitor | CVE-2025-29783No exploit | vLLM Allows Remote Code Execution via Mooncake Integrationvllm · vllm · CWE-502 | Critical9.0 | — | 0.7% | Mar 19, 2025 |
35Monitor | CVE-2025-62164No exploit | VLLM deserialization vulnerability leading to DoS and potential RCEvllm · vllm · CWE-20 | High8.8 | — | 0.9% | Nov 20, 2025 |
35Monitor | CVE-2025-24357No exploit | vLLM allows a malicious model RCE by torch.load in hf_model_weights_iteratorvllm · vllm · CWE-502 | High8.8 | — | 0.8% | Jan 27, 2025 |
35Monitor | CVE-2025-66448No exploit | vLLM vulnerable to remote code execution via transformers_utils/get_configvllm · vllm · CWE-94 | High8.8 | — | 0.6% | Dec 1, 2025 |
35Monitor | CVE-2026-54232No exploit | vLLM: Dependency Confusion Vulnerability in vLLM Dockerfilevllm · vllm · CWE-427 | High8.8 | — | 0.5% | Jun 22, 2026 |
34Monitor | CVE-2026-93436No exploit | vLLM through 0.29.0 Memory Exhaustion via Rejected Requestsvllm · vllm · CWE-401 | High8.7 | — | 0.7% | Sep 17, 2026 |
34Monitor | CVE-2026-56340No exploit | vLLM - Denial of Service via Unvalidated Multimodal Embeddingsvllm · vllm · CWE-20 | High8.7 | — | 0.6% | Jun 20, 2026 |
34Monitor | CVE-2026-94624No exploit | vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading Sessionsvllm · vllm · CWE-770 | High8.7 | — | 0.6% | Sep 21, 2026 |
34Monitor | CVE-2026-94627No exploit | vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collisionvllm · vllm · CWE-401 | High8.7 | — | 0.6% | Sep 21, 2026 |
34Monitor | CVE-2026-94623No exploit | vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failurevllm · vllm · CWE-617 | High8.7 | — | 0.6% | Sep 21, 2026 |
34Monitor | CVE-2026-94626No exploit | vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_sizevllm · vllm · CWE-789 | High8.7 | — | 0.6% | Sep 21, 2026 |
34Monitor | CVE-2026-94622No exploit | vLLM through 0.29.0 Denial of Service via Incomplete NIXL KV Transfer Metadatavllm · vllm · CWE-248 | High8.7 | — | 0.6% | Sep 21, 2026 |
34Monitor | CVE-2026-55574No exploit | vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backendsvllm · vllm · CWE-1333 | High8.7 | — | 0.5% | Jul 6, 2026 |
34Monitor | CVE-2026-93592No exploit | vLLM before 0.28.0 Denial of Service via negative token IDvllm · vllm · CWE-129 | High8.7 | — | 0.5% | Sep 18, 2026 |
34Monitor | CVE-2026-90553No exploit | vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processorvllm · vllm · CWE-94 | High8.5 | — | 0.3% | Sep 12, 2026 |
33Monitor | CVE-2025-62372No exploit | vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputsvllm · vllm · CWE-129 | High8.3 | — | 0.3% | Nov 20, 2025 |
32Monitor | CVE-2025-30165No exploit | Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configurationvllm · vllm · CWE-502 | High8.0 | — | 0.5% | May 6, 2025 |
- CVE-2026-2277844Plan
vLLM leaks a heap address when PIL throws an error
CriticalCVSS 9.8WeaponizedEPSS 16%vllm · vllmFeb 2, 2026
- CVE-2025-3244440Plan
vLLM Vulnerable to Remote Code Execution via Mooncake Integration
CriticalCVSS 9.8No exploitEPSS 1%vllm · vllmApr 29, 2025
- CVE-2024-1104140Plan
Remote Code Execution in vllm-project/vllm
CriticalCVSS 9.8No exploitEPSS 1%vllm · vllmMar 20, 2025
- CVE-2025-4727739Monitor
vLLM Allows Remote Code Execution via PyNcclPipe Communication Service
CriticalCVSS 9.8No exploitEPSS 0%vllm · vllmMay 20, 2025
- CVE-2026-2280739Monitor
vLLM affected by RCE via auto_map dynamic module loading during model initialization
CriticalCVSS 9.8Proof of conceptEPSS 0%vllm · vllmJan 21, 2026
- CVE-2026-2596039Monitor
SSRF Protection Bypass in vLLM
CriticalCVSS 9.8No exploitEPSS 0%vllm · vllmMar 9, 2026
- CVE-2026-2789336Monitor
vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out
HighCVSS 8.8No exploitEPSS 1%vllm · vllmMar 26, 2026
- CVE-2026-4874636Monitor
vLLM: OpenAI auth bypass
CriticalCVSS 9.1No exploitEPSS 1%vllm · vllmJun 22, 2026
- CVE-2025-2978336Monitor
vLLM Allows Remote Code Execution via Mooncake Integration
CriticalCVSS 9.0No exploitEPSS 0%vllm · vllmMar 19, 2025
- CVE-2025-6216435Monitor
VLLM deserialization vulnerability leading to DoS and potential RCE
HighCVSS 8.8No exploitEPSS 0%vllm · vllmNov 20, 2025
- CVE-2025-2435735Monitor
vLLM allows a malicious model RCE by torch.load in hf_model_weights_iterator
HighCVSS 8.8No exploitEPSS 0%vllm · vllmJan 27, 2025
- CVE-2025-6644835Monitor
vLLM vulnerable to remote code execution via transformers_utils/get_config
HighCVSS 8.8No exploitEPSS 0%vllm · vllmDec 1, 2025
- CVE-2026-5423235Monitor
vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile
HighCVSS 8.8No exploitEPSS 0%vllm · vllmJun 22, 2026
- CVE-2026-9343634Monitor
vLLM through 0.29.0 Memory Exhaustion via Rejected Requests
HighCVSS 8.7No exploitEPSS 0%vllm · vllmSep 17, 2026
- CVE-2026-5634034Monitor
vLLM - Denial of Service via Unvalidated Multimodal Embeddings
HighCVSS 8.7No exploitEPSS 0%vllm · vllmJun 20, 2026
- CVE-2026-9462434Monitor
vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading Sessions
HighCVSS 8.7No exploitEPSS 0%vllm · vllmSep 21, 2026
- CVE-2026-9462734Monitor
vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision
HighCVSS 8.7No exploitEPSS 0%vllm · vllmSep 21, 2026
- CVE-2026-9462334Monitor
vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure
HighCVSS 8.7No exploitEPSS 0%vllm · vllmSep 21, 2026
- CVE-2026-9462634Monitor
vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_size
HighCVSS 8.7No exploitEPSS 0%vllm · vllmSep 21, 2026
- CVE-2026-9462234Monitor
vLLM through 0.29.0 Denial of Service via Incomplete NIXL KV Transfer Metadata
HighCVSS 8.7No exploitEPSS 0%vllm · vllmSep 21, 2026
- CVE-2026-5557434Monitor
vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends
HighCVSS 8.7No exploitEPSS 0%vllm · vllmJul 6, 2026
- CVE-2026-9359234Monitor
vLLM before 0.28.0 Denial of Service via negative token ID
HighCVSS 8.7No exploitEPSS 0%vllm · vllmSep 18, 2026
- CVE-2026-9055334Monitor
vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processor
HighCVSS 8.5No exploitEPSS 0%vllm · vllmSep 12, 2026
- CVE-2025-6237233Monitor
vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs
HighCVSS 8.3No exploitEPSS 0%vllm · vllmNov 20, 2025
- CVE-2025-3016532Monitor
Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration
HighCVSS 8.0No exploitEPSS 0%vllm · vllmMay 6, 2025