vllm-project vulnerabilities

CVEs per yearBy the year they were published

1. 202521
2. 20252
3. 2026102

Newest CVEs

• CVE-2026-115918

  vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

  vllm-project · vllm

  Medium6.5
• CVE-2026-115917

  vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server

  vllm-project · vllm

  Low3.4
• CVE-2026-115916

  vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

  vllm-project · vllm

  Medium6.5
• CVE-2026-115915

  vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

  vllm-project · vllm

  High8.1
• CVE-2026-115914

  vLLM DeepSeek-OCR image processing vulnerable to denial of service

  vllm-project · vllm

  Medium6.5
• CVE-2026-115913

  vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine

  vllm-project · vllm

  Medium6.5
• CVE-2026-115912

  vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled

  vllm-project · vllm

  High7.5
• CVE-2026-115911

  vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool

  vllm-project · vllm

  Medium6.5
• CVE-2026-116181

  vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids

  vllm-project · vllm

  High7.1
• CVE-2026-116180

  vLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensors

  vllm-project · vllm

  High8.3