EXPLOIT-CVE-2026-22778

CVE-2026-22778 — vLLM 视频处理中的 RCE 针对 CVE-2026-22778 （CVSS 9.8）的漏洞实验环境与概念验证，该漏洞是 vLLM 多模态摄取路径中的未认证远程代码执行链。 | ---|--- CVE| CVE-2026-22778 公告| GHSA-4r2x-xpjr-7cvv 受影响版本| vLLM = 0.8.3, vLLM 将媒体加载失败转换为 HTTP 400，并将 exc.detail 原封不动地返回给客户端 （apiserver.py）： async def httpexceptionhandler: Request, exc:...

vLLM Vulnerable to Remote DoS via Special-Token Placeholders

SummaryThis report explains a Token Injection vulnerability in vLLM’s multimodal processing. Unauthenticated, text-only prompts that spell special tokens are interpreted as control. Image and video placeholder sequences supplied without matching data cause vLLM to index into empty grids during...

PT-2026-60020

Summary This report explains a Token Injection vulnerability in vLLM’s multimodal processing. Unauthenticated, text-only prompts that spell special tokens are interpreted as control. Image and video placeholder sequences supplied without matching data cause vLLM to index into empty grids during...

CVE-2025-62372 vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs

vLLM is an inference and serving engine for large language models LLMs. From version 0.5.5 to before 0.11.1, users can crash the vLLM engine serving multimodal models by passing multimodal embedding inputs with correct ndim but incorrect shape e.g. hidden dimension is wrong, regardless of whether...

CVE-2025-54624

Unexpected injection event vulnerability in the multimodalinput module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54624

Unexpected injection event vulnerability in the multimodalinput module. Impact: Successful exploitation of this vulnerability may affect availability...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An unintended injection event vulnerability exists in the Huawei HarmonyOS multimodalinput module, which can be exploited by an attacker to cause availabilit...