Red Hat Security AdvisoryRHSA-2026:83121
Red Hat AI Inference 3.4.6 (rocm)
Released 2026-10-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AI Inference Server 3.4 registry.redhat.io/rhaii/vllm-rocm-rhel9
Fixes 16 records
Priority HIGH 77
vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00544 · Published 2026-09-18 · Partial fix · 0.28.0 CWE-129
Priority HIGH 73
fsspec is a specification and Python implementation framework for filesystem interfaces.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00475 · Published 2026-10-02 · Partial fix · 2026.6.0 CWE-1336
Priority MEDIUM 64
vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls (the VLLM_MAX_AUDIO_CLIP_FILESIZE_MB compressed-audio size cap, default 25 MB, and the per-modality…
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00808 · Published 2026-09-26 · Partial fix · 0.29.0 CWE-400
Priority MEDIUM 64
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_map entries from sharded checkpoint index…
CVSS 4.0MEDIUM 6.9· Local · No auth · User interaction · EPSS 0.00187 · Published 2026-08-10 · Partial fix CWE-22
Priority MEDIUM 63
Multidict is an implementation of a multidict data structure.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00448 · Published 2026-10-02 · Partial fix · 6.9.1 CWE-401
Priority MEDIUM 41
Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines ~102 and ~163, and src/peft/tuners/lora/loraga.py line ~101) call torch.load on config-specified cache/covariance files wi…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00497 · Published 2026-08-05 · Partial fix CWE-502
Priority MEDIUM 40
pyasn1 is a generic ASN.1 library for Python.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2026-07-14 · Partial fix · 0.6.4 CWE-400
Priority MEDIUM 40
pyasn1 is a generic ASN.1 library for Python.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2026-07-14 · Partial fix · 0.6.4 CWE-400
Priority MEDIUM 40
vLLM up to and including 0.17.0 allows remote attackers to cause a Denial of Service via memory exhaustion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00727 · Published 2026-08-28 · Partial fix CWE-400
Priority LOW 39
pyasn1 is a generic ASN.1 library for Python.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0044 · Published 2026-07-14 · Partial fix · 0.6.4 CWE-400
Priority LOW 38
urllib3 is an HTTP client library for Python.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.00335 · Published 2026-09-29 · Partial fix · 2.8.0 CWE-770
Priority LOW 36
urllib3 is an HTTP client library for Python.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00292 · Published 2026-09-29 · Partial fix · 2.8.0 CWE-835
Priority LOW 36
Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.0045 · Published 2026-08-20 · Partial fix CWE-502
Priority LOW 35
urllib3 is an HTTP client library for Python.
CVSS 4.0HIGH 7.6· Network · No auth · User interaction · EPSS 0.00206 · Published 2026-09-29 · Partial fix · 2.8.0 CWE-295
Priority LOW 34
PyJWT is a Python implementation of JSON Web Token standards.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00175 · Published 2026-09-28 · Partial fix · 2.14.0 CWE-347
Priority LOW 32
vLLM is a library for LLM inference and serving.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00665 · Published 2026-07-06 · Partial fix · 0.24.0 CWE-617
THREATIST.IORead the docs