SB2026072870 - Multiple vulnerabilities in vLLM

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026072870

SB2026072870 - Multiple vulnerabilities in vLLM

Published: July 28, 2026

Security Bulletin ID SB2026072870
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 3
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 67% Low 33%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 3 vulnerabilities.


1) Race condition (CVE-ID: N/A)

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause a denial of service or memory corruption.

The vulnerability exists due to a race condition in safe_load_prompt_embeds in vllm/renderers/embed_utils.py when processing concurrent prompt_embeds parts in a /v1/chat/completions request. A remote attacker can send specially crafted concurrent prompt embedding parts to cause a denial of service or memory corruption.

Exploitation requires the enable_prompt_embeds feature to be enabled. Authentication is optional in the stock server and depends on whether an API key is configured.


2) Resource exhaustion (CVE-ID: N/A)

CWE-ID: CWE-400 - Resource exhaustion

CVSSv4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to cause a denial of service.

The vulnerability exists due to uncontrolled resource consumption in the /v1/completions serving path when processing list-shaped prompt inputs. A remote user can send a specially crafted completion request with an oversized prompt list to cause a denial of service.

The issue affects requests where the prompt parameter is supplied as a list of text prompts or a list of token-id prompts, causing one backend subrequest and one response slot to be created for each list element.


3) Information Exposure Through an Error Message (CVE-ID: N/A)

CWE-ID: CWE-209 - Information Exposure Through an Error Message

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to generation of error messages containing sensitive information in validation_exception_handler in vllm/entrypoints/openai/server_utils.py when handling malformed JSON requests or requests missing required fields. A remote attacker can send a specially crafted malformed request to disclose sensitive information.

Exposed details may include the operating system username, home directory path, virtual environment path, Python version, internal package structure, line numbers, and handler function names for affected endpoints.


Remediation

Install update from vendor's website.

References