PT-2026-30199

Name of the Vulnerable Software and Affected Versions vLLM versions 0.1.0 through 0.18.9 Description A Denial of Service vulnerability exists in the vLLM OpenAI-compatible API server. Due to the lack of an upper bound validation on the n parameter in the ChatCompletionRequest and CompletionReques...

Improper Input Validation

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Input Validation due to inconsistent downmixing behavior in the tomono process. An attacker can manipulate audio inputs to cause the AI mod...

PYSEC-2026-2299

vLLM is an inference and serving engine for large language models LLMs. From version 0.5.5 to before version 0.18.0, Librosa defaults to using numpy.mean for mono downmixing tomono, while the international standard ITU-R BS.775-4 specifies a weighted downmixing algorithm. This discrepancy results...

CVE-2026-34760

vLLM is an inference and serving engine for large language models LLMs. From version 0.5.5 to before version 0.18.0, Librosa defaults to using numpy.mean for mono downmixing tomono, while the international standard ITU-R BS.775-4 specifies a weighted downmixing algorithm. This discrepancy results...

CVE-2026-34760

vLLM is an inference and serving engine for large language models LLMs. From version 0.5.5 to before version 0.18.0, Librosa defaults to using numpy.mean for mono downmixing tomono, while the international standard ITU-R BS.775-4 specifies a weighted downmixing algorithm. This discrepancy results...

CVE-2026-34760 vLLM: Downmix Implementation Differences as Attack Vectors Against Audio AI Models

vLLM is an inference and serving engine for large language models LLMs. From version 0.5.5 to before version 0.18.0, Librosa defaults to using numpy.mean for mono downmixing tomono, while the international standard ITU-R BS.775-4 specifies a weighted downmixing algorithm. This discrepancy results...

GHSA-7972-PG2X-XR59 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.4, vllm-openai-cuda-12.9...

CVE-2026-27893 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.4, vllm-openai-cuda-12.9...

GHSA-7972-PG2X-XR59 vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out

Summary Two model implementation files hardcode trustremotecode=True when loading sub-components, bypassing the user's explicit --trust-remote-code=False security opt-out. This enables remote code execution via malicious model repositories even when the user has explicitly disabled remote code...

vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out

Summary Two model implementation files hardcode trustremotecode=True when loading sub-components, bypassing the user's explicit --trust-remote-code=False security opt-out. This enables remote code execution via malicious model repositories even when the user has explicitly disabled remote code...

Unsafe Dependency Resolution

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Unsafe Dependency Resolution in the process of loading sub-components with the trustremotecode parameter set to True, regardless of user...

GHSA-QH4C-XF7M-GXFC vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9...

CVE-2026-24779 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9...

GHSA-3C37-WWVX-H642 vulnerabilities

Vulnerabilities for packages: localstack, tritonserver-backend-vllm-cuda-12.9, vllm-openai-cuda-12.9, py3-cbor2, tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.4...

CVE-2026-26209 vulnerabilities

Vulnerabilities for packages: localstack, tritonserver-backend-vllm-cuda-12.9, vllm-openai-cuda-12.9, py3-cbor2, tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.4...

CVE-2026-22778 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9...

GHSA-GRG2-63FW-F2QR vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9...

CVE-2026-22773 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9...

GHSA-4R2X-XPJR-7CVV vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9...

PYSEC-2026-2297

vLLM is an inference and serving engine for large language models LLMs. Starting in version 0.10.1 and prior to version 0.18.0, two model implementation files hardcode trustremotecode=True when loading sub-components, bypassing the user's explicit --trust-remote-code=False security opt-out. This...