TI-2026-32202 CVE-2026-44223 · GHSA-83vm-p52w-f9pw
vLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parameters
Priority MEDIUM 62
vLLM is an inference and serving engine for large language models (LLMs).
RHSA-2026:57380
Red Hat AI Inference 3.4.4 (cpu)
Released 2026-08-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AI Inference Server 3.4 registry.redhat.io/rhaii/vllm-cpu-rhel9
Fixes 5 records
TI-2026-30106 CVE-2026-41523 · GHSA-q8gq-377p-jq3r
vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution
Priority LOW 37
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-27000 CVE-2026-34756 · GHSA-3mwp-wvh9-7528
vLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server
Priority LOW 29
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-26999 CVE-2026-34755 · GHSA-pq5c-rjhq-qp7p
vLLM Affected by Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing
Priority LOW 29
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-26997 CVE-2026-34753 · GHSA-pf3h-qjgv-vcpr
vLLM affected by Server-Side Request Forgery (SSRF) in `download_bytes_from_url `
Priority LOW 24
vLLM is an inference and serving engine for large language models (LLMs).