823 matches found
CVE-2026-7141
A flaw was found in vllm. A remote attacker can exploit a vulnerability in the hasmambalayers function within the KV Block Handler component. By performing a specific manipulation, an uninitialized resource can be triggered, potentially leading to information disclosure or denial of service. The...
vLLM makes Use of Uninitialized Resource
A vulnerability was found in vLLM up to 0.19.0. The affected element is the function hasmambalayers of the file vllm/v1/kvcacheinterface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is...
GHSA-X368-4G9H-FVV4 vLLM makes Use of Uninitialized Resource
A vulnerability was found in vLLM up to 0.19.0. The affected element is the function hasmambalayers of the file vllm/v1/kvcacheinterface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is...
aana (>=0.2.1, <=0.2.2.2), acai-swarm (0.1.0) +209 more potentially affected by CVE-2026-7141 via vllm (>=0.1.3, <=0.28.0)
vllm PYPI version =0.1.3, =0.2.1, =1.2.1, =0.0.0, =2.3.5.dev0, =0.0.1b1, =0.2.2, =0.2.4, =1.0.0, =0.2.0, =0.3.0 and more Source cves: CVE-2026-7141 Source advisory: SNYK:PYTHON-VLLM-16316415...
CVE-2026-44222
creationtimestamp| type| source ---|---|--- 2026-04-27 18:00:06+00:00| published-proof-of-concept| https://github.com/vllm-project/vllm/security/advisories/GHSA-hpv8-x276-m59f...
PYSEC-2026-2306
A vulnerability was found in vllm up to 0.19.0. The affected element is the function hasmambalayers of the file vllm/v1/kvcacheinterface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is...
CVE-2026-7141
A vulnerability was found in vLLM up to 0.19.0. The affected element is the function hasmambalayers of the file vllm/v1/kvcacheinterface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is...
PYSEC-2026-2306
A vulnerability was found in vllm up to 0.19.0. The affected element is the function hasmambalayers of the file vllm/v1/kvcacheinterface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is...
CVE-2026-7141
CVE-2026-7141 affects vllm up to 0.19.0, specifically the KV Block Handler’s has_mamba_layers function in vllm/v1/kv_cache_interface.py. A manipulation can trigger an uninitialized resource, with remote initiation possible. The issue is described as high complexity and difficult exploitability, w...
CVE-2026-7141
A vulnerability was found in vllm up to 0.19.0. The affected element is the function hasmambalayers of the file vllm/v1/kvcacheinterface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is...
EUVD-2026-25892
A vulnerability was found in vllm up to 0.19.0. The affected element is the function hasmambalayers of the file vllm/v1/kvcacheinterface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is...
CVE-2026-7141 vLLM KV Block kv_cache_interface.py has_mamba_layers uninitialized resource
A vulnerability was found in vLLM up to 0.19.0. The affected element is the function hasmambalayers of the file vllm/v1/kvcacheinterface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is...
vLLM 安全漏洞
vLLM is an open-source inference and service engine designed for LLM models, featuring high throughput and efficient memory usage. Versions of vLLM prior to 0.19.0 contained a security vulnerability. This vulnerability stemmed from a function in the KV Block Handler component called...
PT-2026-35459
A vulnerability was found in vllm up to 0.19.0. The affected element is the function has mamba layers of the file vllm/v1/kv cache interface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attac...
CVE-2026-1839 vulnerabilities
Vulnerabilities for packages: text-generation-inference, tritonserver-backend-vllm-cuda-12.9, lmcache-cuda-12.8, vllm-openai-cuda-12.9, py3-transformers, nemo, tritonserver-backend-vllm-cuda-13.0...
GHSA-69W3-R845-3855 vulnerabilities
Vulnerabilities for packages: text-generation-inference, tritonserver-backend-vllm-cuda-12.9, lmcache-cuda-12.8, vllm-openai-cuda-12.9, py3-transformers, nemo, tritonserver-backend-vllm-cuda-13.0...
GHSA-WHJ4-6X5X-4V2J vulnerabilities
Vulnerabilities for packages: text-generation-inference, kubeflow-pipelines-visualization-server, open-webui, superset, mlflow, tritonserver-backend-vllm-cuda-12.9, litellm, py3-vllm-cuda-12.4...
CVE-2026-40192 vulnerabilities
Vulnerabilities for packages: text-generation-inference, kubeflow-pipelines-visualization-server, open-webui, superset, mlflow, tritonserver-backend-vllm-cuda-12.9, litellm, py3-vllm-cuda-12.4...