vllm
13 known vulnerabilities affecting vllm products.
Products
Vulnerabilities by priority
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-27893 | Medium | 1.8% | 8.8 | vLLM is an inference and serving engine for large language models (LLMs). Starti… | |
| CVE-2026-48746 | Medium | 1.2% | 9.1 | vLLM is an inference and serving engine for large language models (LLMs). From 0… | |
| CVE-2026-41523 | Medium | 0.9% | 7.5 | vLLM is an inference and serving engine for large language models (LLMs). Prior … | |
| CVE-2026-5497 | Medium | 0.9% | 7.5 | vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of… | |
| CVE-2026-22807 | Medium | 0.8% | 8.8 | vLLM is an inference and serving engine for large language models (LLMs). Starti… | |
| CVE-2026-25960 | Medium | 0.7% | 7.1 | vLLM is an inference and serving engine for large language models (LLMs). The SS… | |
| CVE-2026-24779 | Medium | 0.6% | 7.1 | vLLM is an inference and serving engine for large language models (LLMs). Prior … | |
| CVE-2026-90553 | Medium | 0.3% | 7.8 | vLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOn… | |
| CVE-2026-34755 | Low | 0.8% | 6.5 | vLLM is an inference and serving engine for large language models (LLMs). From 0… | |
| CVE-2026-34756 | Low | 0.8% | 6.5 | vLLM is an inference and serving engine for large language models (LLMs). From 0… | |
| CVE-2026-90555 | Low | 0.5% | 6.5 | vLLM versions before 0.28.0 fail to validate audio sample rate headers in the tr… | |
| CVE-2026-7141 | Low | 0.5% | 5.6 | A vulnerability was found in vLLM up to 0.19.0. The affected element is the func… | |
| CVE-2026-34760 | Low | 0.5% | 5.9 | vLLM is an inference and serving engine for large language models (LLMs). From v… |