vLLM vulnerabilities

CVEs whose affected-version data names the vLLM package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

vLLM vulnerabilities

vLLM allows clients to crash the openai server with invalid regex

vLLM DOS: Remotely kill vllm over http with invalid JSON schema

Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching

vLLM Tool Schema allows DoS via Malformed pattern and type Fields

vLLM vulnerable to Regular Expression Denial of Service

vLLM Allows Remote Code Execution via PyNcclPipe Communication Service

Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration

vLLM Vulnerable to Remote Code Execution via Mooncake Integration

phi4mm: Quadratic Time Complexity in Input Token Processing​ leads to denial of service

Data exposure via ZeroMQ on multi-node vLLM deployment

CVE-2025-24357 Malicious model remote code execution fix bypass with PyTorch < 2.6.0

vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_object

vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints

vLLM Deserialization of Untrusted Data vulnerability

vLLM Allows Remote Code Execution via Mooncake Integration

vLLM denial of service via outlines unbounded cache on disk

vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cache

vllm: Malicious model to RCE by torch.load in hf_model_weights_iterator

vLLM Denial of Service via the best_of parameter

vLLM denial of service vulnerability

phi4mm: Quadratic Time Complexity in Input Token Processing leads to denial of service