GHSA-mrw7-hf4f-83pf
High · 8.8CVSS
8.8
EPSS
—
Published
Nov 20, 2025
CISA due date
—
The record
vLLM deserialization vulnerability leading to DoS and potential RCE
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | vllm | 0.10.2 | 0.11.1 |
| Chainguard | tritonserver-backend-vllm-cuda-12.9 | 0 | 25.9.0_git20251112-r1 |
| Chainguard | tritonserver-backend-vllm-meta-cuda-12.9 | 0 | 25.9.0_git20251112-r1 |
| pypi | vllm | 0.10.2 | No fix |
Related vulnerabilities
- CVE-2025-62164 vLLM deserialization vulnerability leading to DoS and potential RCE Same vulnerability
- CVE-2026-22778 vLLM is an inference and serving engine for large language models (LLMs). Also affects vllm
- GHSA-4r2x-xpjr-7cvv vLLM has RCE In Video Processing Also affects vllm
- GHSA-qh4c-xf7m-gxfc vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector Also affects vllm
- CVE-2026-24779 vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector Also affects vllm
- GHSA-2pc9-4j83-qjmr vLLM affected by RCE via auto_map dynamic module loading during model initialization Also affects vllm
- CVE-2026-22807 vLLM affected by RCE via auto_map dynamic module loading during model initialization Also affects vllm
- GHSA-grg2-63fw-f2qr vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous… Also affects vllm