vllm kayıtları
vllm üreticisine ait 62 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %1,4
- Pre-auth RCE
- 10
- Düzeltme kaydı olan
- %87,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-400 Uncontrolled Resource Consumption8
- CWE-770 Allocation of Resources Without Limits or Throttling7
- CWE-129 Improper Validation of Array Index6
- CWE-502 Deserialization of Untrusted Data6
- CWE-20 Improper Input Validation5
- CWE-1333 Inefficient Regular Expression Complexity4
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
62 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
42Planlayın | CVE-2026-22778Silahlaştırılmış | vLLM leaks a heap address when PIL throws an errorvllm · vllm · CWE-532 | Kritik9,8 | — | %10,5 | 2 Şub 2026 |
40Planlayın | CVE-2025-32444İstismar yok | vLLM Vulnerable to Remote Code Execution via Mooncake Integrationvllm · vllm · CWE-502 | Kritik9,8 | — | %1,8 | 29 Nis 2025 |
39İzleyin | CVE-2024-11041İstismar yok | Remote Code Execution in vllm-project/vllmvllm · vllm · CWE-502 | Kritik9,8 | — | %1,6 | 20 Mar 2025 |
39İzleyin | CVE-2025-47277İstismar yok | vLLM Allows Remote Code Execution via PyNcclPipe Communication Servicevllm · vllm · CWE-502 | Kritik9,8 | — | %1,0 | 20 May 2025 |
39İzleyin | CVE-2026-22807Kavram kanıtı | vLLM affected by RCE via auto_map dynamic module loading during model initializationvllm · vllm · CWE-94 | Kritik9,8 | — | %0,8 | 21 Oca 2026 |
39İzleyin | CVE-2026-25960İstismar yok | SSRF Protection Bypass in vLLMvllm · vllm · CWE-918 | Kritik9,8 | — | %0,7 | 9 Mar 2026 |
36İzleyin | CVE-2026-27893İstismar yok | vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-outvllm · vllm · CWE-693 | Yüksek8,8 | — | %1,8 | 26 Mar 2026 |
36İzleyin | CVE-2026-48746İstismar yok | vLLM: OpenAI auth bypassvllm · vllm · CWE-444 | Kritik9,1 | — | %1,2 | 22 Haz 2026 |
36İzleyin | CVE-2025-29783İstismar yok | vLLM Allows Remote Code Execution via Mooncake Integrationvllm · vllm · CWE-502 | Kritik9,0 | — | %0,7 | 19 Mar 2025 |
35İzleyin | CVE-2025-62164İstismar yok | VLLM deserialization vulnerability leading to DoS and potential RCEvllm · vllm · CWE-20 | Yüksek8,8 | — | %0,9 | 20 Kas 2025 |
35İzleyin | CVE-2025-24357İstismar yok | vLLM allows a malicious model RCE by torch.load in hf_model_weights_iteratorvllm · vllm · CWE-502 | Yüksek8,8 | — | %0,7 | 27 Oca 2025 |
35İzleyin | CVE-2025-66448İstismar yok | vLLM vulnerable to remote code execution via transformers_utils/get_configvllm · vllm · CWE-94 | Yüksek8,8 | — | %0,7 | 1 Ara 2025 |
35İzleyin | CVE-2026-54232İstismar yok | vLLM: Dependency Confusion Vulnerability in vLLM Dockerfilevllm · vllm · CWE-427 | Yüksek8,8 | — | %0,6 | 22 Haz 2026 |
34İzleyin | CVE-2026-93436İstismar yok | vLLM through 0.29.0 Memory Exhaustion via Rejected Requestsvllm · vllm · CWE-401 | Yüksek8,7 | — | %0,8 | 17 Eyl 2026 |
34İzleyin | CVE-2026-56340İstismar yok | vLLM - Denial of Service via Unvalidated Multimodal Embeddingsvllm · vllm · CWE-20 | Yüksek8,7 | — | %0,6 | 20 Haz 2026 |
34İzleyin | CVE-2026-94626İstismar yok | vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_sizevllm · vllm · CWE-789 | Yüksek8,7 | — | %0,6 | 21 Eyl 2026 |
34İzleyin | CVE-2026-94624İstismar yok | vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading Sessionsvllm · vllm · CWE-770 | Yüksek8,7 | — | %0,6 | 21 Eyl 2026 |
34İzleyin | CVE-2026-94627İstismar yok | vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collisionvllm · vllm · CWE-401 | Yüksek8,7 | — | %0,6 | 21 Eyl 2026 |
34İzleyin | CVE-2026-94623İstismar yok | vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failurevllm · vllm · CWE-617 | Yüksek8,7 | — | %0,6 | 21 Eyl 2026 |
34İzleyin | CVE-2026-94622İstismar yok | vLLM through 0.29.0 Denial of Service via Incomplete NIXL KV Transfer Metadatavllm · vllm · CWE-248 | Yüksek8,7 | — | %0,6 | 21 Eyl 2026 |
34İzleyin | CVE-2026-55574İstismar yok | vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backendsvllm · vllm · CWE-1333 | Yüksek8,7 | — | %0,6 | 6 Tem 2026 |
34İzleyin | CVE-2026-93592İstismar yok | vLLM before 0.28.0 Denial of Service via negative token IDvllm · vllm · CWE-129 | Yüksek8,7 | — | %0,5 | 18 Eyl 2026 |
34İzleyin | CVE-2026-90553İstismar yok | vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processorvllm · vllm · CWE-94 | Yüksek8,5 | — | %0,3 | 12 Eyl 2026 |
33İzleyin | CVE-2025-62372İstismar yok | vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputsvllm · vllm · CWE-129 | Yüksek8,3 | — | %0,4 | 20 Kas 2025 |
32İzleyin | CVE-2025-30165İstismar yok | Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configurationvllm · vllm · CWE-502 | Yüksek8,0 | — | %0,5 | 6 May 2025 |
- CVE-2026-2277842Planlayın
vLLM leaks a heap address when PIL throws an error
KritikCVSS 9,8SilahlaştırılmışEPSS %10vllm · vllm2 Şub 2026
- CVE-2025-3244440Planlayın
vLLM Vulnerable to Remote Code Execution via Mooncake Integration
KritikCVSS 9,8İstismar yokEPSS %2vllm · vllm29 Nis 2025
- CVE-2024-1104139İzleyin
Remote Code Execution in vllm-project/vllm
KritikCVSS 9,8İstismar yokEPSS %2vllm · vllm20 Mar 2025
- CVE-2025-4727739İzleyin
vLLM Allows Remote Code Execution via PyNcclPipe Communication Service
KritikCVSS 9,8İstismar yokEPSS %1vllm · vllm20 May 2025
- CVE-2026-2280739İzleyin
vLLM affected by RCE via auto_map dynamic module loading during model initialization
KritikCVSS 9,8Kavram kanıtıEPSS %1vllm · vllm21 Oca 2026
- CVE-2026-2596039İzleyin
SSRF Protection Bypass in vLLM
KritikCVSS 9,8İstismar yokEPSS %1vllm · vllm9 Mar 2026
- CVE-2026-2789336İzleyin
vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out
YüksekCVSS 8,8İstismar yokEPSS %2vllm · vllm26 Mar 2026
- CVE-2026-4874636İzleyin
vLLM: OpenAI auth bypass
KritikCVSS 9,1İstismar yokEPSS %1vllm · vllm22 Haz 2026
- CVE-2025-2978336İzleyin
vLLM Allows Remote Code Execution via Mooncake Integration
KritikCVSS 9,0İstismar yokEPSS %1vllm · vllm19 Mar 2025
- CVE-2025-6216435İzleyin
VLLM deserialization vulnerability leading to DoS and potential RCE
YüksekCVSS 8,8İstismar yokEPSS %1vllm · vllm20 Kas 2025
- CVE-2025-2435735İzleyin
vLLM allows a malicious model RCE by torch.load in hf_model_weights_iterator
YüksekCVSS 8,8İstismar yokEPSS %1vllm · vllm27 Oca 2025
- CVE-2025-6644835İzleyin
vLLM vulnerable to remote code execution via transformers_utils/get_config
YüksekCVSS 8,8İstismar yokEPSS %1vllm · vllm1 Ara 2025
- CVE-2026-5423235İzleyin
vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile
YüksekCVSS 8,8İstismar yokEPSS %1vllm · vllm22 Haz 2026
- CVE-2026-9343634İzleyin
vLLM through 0.29.0 Memory Exhaustion via Rejected Requests
YüksekCVSS 8,7İstismar yokEPSS %1vllm · vllm17 Eyl 2026
- CVE-2026-5634034İzleyin
vLLM - Denial of Service via Unvalidated Multimodal Embeddings
YüksekCVSS 8,7İstismar yokEPSS %1vllm · vllm20 Haz 2026
- CVE-2026-9462634İzleyin
vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_size
YüksekCVSS 8,7İstismar yokEPSS %1vllm · vllm21 Eyl 2026
- CVE-2026-9462434İzleyin
vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading Sessions
YüksekCVSS 8,7İstismar yokEPSS %1vllm · vllm21 Eyl 2026
- CVE-2026-9462734İzleyin
vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision
YüksekCVSS 8,7İstismar yokEPSS %1vllm · vllm21 Eyl 2026
- CVE-2026-9462334İzleyin
vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure
YüksekCVSS 8,7İstismar yokEPSS %1vllm · vllm21 Eyl 2026
- CVE-2026-9462234İzleyin
vLLM through 0.29.0 Denial of Service via Incomplete NIXL KV Transfer Metadata
YüksekCVSS 8,7İstismar yokEPSS %1vllm · vllm21 Eyl 2026
- CVE-2026-5557434İzleyin
vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends
YüksekCVSS 8,7İstismar yokEPSS %1vllm · vllm6 Tem 2026
- CVE-2026-9359234İzleyin
vLLM before 0.28.0 Denial of Service via negative token ID
YüksekCVSS 8,7İstismar yokEPSS %1vllm · vllm18 Eyl 2026
- CVE-2026-9055334İzleyin
vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processor
YüksekCVSS 8,5İstismar yokEPSS %0vllm · vllm12 Eyl 2026
- CVE-2025-6237233İzleyin
vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs
YüksekCVSS 8,3İstismar yokEPSS %0vllm · vllm20 Kas 2025
- CVE-2025-3016532İzleyin
Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration
YüksekCVSS 8,0İstismar yokEPSS %0vllm · vllm6 May 2025