PT-2026-55999

Name of the Vulnerable Software and Affected Versions vLLM versions 0.12.0 through 0.23.x Description A flaw in the EngineCore of the library occurs when a remote authorized user sends a pure prompt embeds payload to the '/v1/completions' endpoint using a model that implements M-RoPE Multimodal...

PT-2026-56000

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.24.0 Description The structured outputs.regex API parameter allows user-supplied regular expression strings to be passed to grammar compiler backends without a compilation timeout. In the xgrammar backend, the string i...

CVE-2026-4372 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, text-generation-inference, nemo...

GHSA-29PF-2H5F-8G72 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, text-generation-inference, nemo...

GHSA-5JV2-G5WQ-CMR4 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-13.0, vllm-cuda-13.2...

CVE-2026-53923 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-13.0, vllm-cuda-13.2...

CVE-2026-12491 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-13.0, vllm-cuda-13.2...

CVE-2026-54235 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-13.0, vllm-cuda-13.2, py3-vllm-cuda-12.4...

CVE-2026-54233 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-13.0, vllm-cuda-13.2...

CVE-2026-54236 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-13.0, vllm-cuda-13.2...

GHSA-6PR9-RP53-2PMC vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-13.0, vllm-cuda-13.2...

GHSA-8JR5-V98P-W75M vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-13.0, vllm-cuda-13.2...

GHSA-7H4P-RFFG-7823 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-13.0, vllm-cuda-13.2, py3-vllm-cuda-12.4...

GHSA-HGG8-FQQC-VFMW vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-13.0, vllm-cuda-13.2...

PYSEC-2026-566 vLLM Deserialization of Untrusted Data vulnerability

vllm-project vllm version v0.6.2 contains a vulnerability in the MessageQueue.dequeue API function. The function uses pickle.loads to parse received sockets directly, leading to a remote code execution vulnerability. An attacker can exploit this by sending a malicious payload to the MessageQueue,...

PYSEC-2026-567 vLLM Allows Remote Code Execution via PyNcclPipe Communication Service

Impacted Environments This issue ONLY impacts environments using the PyNcclPipe KV cache transfer integration with the V0 engine. No other configurations are affected. Summary vLLM supports the use of the PyNcclPipe class to establish a peer-to-peer communication domain for data transmission...

PYSEC-2026-568 vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_object

vllm-project vllm version 0.6.0 contains a vulnerability in the distributed training API. The function vllm.distributed.GroupCoordinator.recvobject deserializes received object bytes using pickle.loads without sanitization, leading to a remote code execution vulnerability. Maintainer perspective...

CVE-2025-71379

A flaw was found in vLLM. Multiple regular expression denial of service ReDoS vulnerabilities exist in versions greater than or equal to 0.6.3 and less than 0.9.0. An attacker can exploit this by submitting crafted input with nested or repeated structures to specific regex patterns within vLLM,...

CVE-2026-56340

A flaw was found in vLLM. This vulnerability allows a remote attacker to trigger crashes or resource exhaustion, leading to a denial of service DoS. By submitting specially crafted embedding requests with malformed tensor indices, when the prompt-embeds feature is enabled, an attacker could also...

CVE-2026-53923

A flaw was found in vLLM. Integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels leads to partial tensor processing. This results in the output tensor retaining previously used GPU memory, which, in multi-tenant inference deployments, can expose sensitive tensor data from other...