Vllm: server side request forgery (ssrf) in mediaconnector
Priority LOW 31CWE-918Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Impact type
- Spoofing
- Confidentiality · integrity · availability
- High · Low · High
- Fix status
- Partial Red Hat: 3 fixed, 4 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-601.
Summary
A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The load_from_url and load_from_url_async methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an attacker to coerce the vLLM server into making arbitrary requests to internal network resources.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00253 16th percentileScored 2026-11-07
Fix Partial vllm (PyPI): 0.11.0Red Hat: 8 advisoriesRed Hat: 3 fixed, 4 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) | — | — | No fix listed | CNA |
| — | vllm (PyPI) | 0.5.0 to before 0.11.0 | 0.11.0 | Patch available | GHSA-3f6c-7fw2-ppm4 |
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux AI (RHEL AI) VendorRed Hat Affected — Fixed in — No fix listed CNA
- vllm (PyPI) Vendor— Affected 0.5.0 to before 0.11.0 Fixed in 0.11.0 Patch available GHSA-3f6c-7fw2-ppm4
Remediation
- Fix · GHSA-3f6c-7fw2-ppm4 vllm (PyPI) Fixed in 0.11.0 Advisory →
Red Hat 8 advisories
- RHSA-2026:19712 Released 2026-05-20 · Red Hat rating CriticalRHOAI 3.3.3 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +33
- RHSA-2026:10184 Released 2026-04-23 · Red Hat rating ImportantRHOAI 2.25.5 - Red Hat OpenShift AI
- Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
- RHSA-2026:3713 Released 2026-03-04 · Red Hat rating CriticalRHOAI 3.3 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +47
Show 5 more Red Hat advisories
- RHSA-2026:3462 Released 2026-02-27 · Red Hat rating CriticalRed Hat AI Inference Server 3.2.2 (ROCm)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
- RHSA-2026:3461 Released 2026-02-27 · Red Hat rating CriticalRed Hat AI Inference Server 3.2.2 (CUDA)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
- RHSA-2025:23080 Released 2025-12-10 · Red Hat rating ImportantRed Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
- RHSA-2025:23079 Released 2025-12-10 · Red Hat rating ImportantRed Hat AI Inference Server 3.2.2 (ROCm)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
- RHSA-2025:23078 Released 2025-12-10 · Red Hat rating ImportantRed Hat AI Inference Server 3.2.2 (CUDA)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat AI Inference Server | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux AI (RHEL AI) | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Affected | No fix planned: Will not fix |
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet |
| Red Hat AI Inference Server 3.2 | Fixed | RHSA-2025:23078, RHSA-2025:23079, RHSA-2025:23080, RHSA-2026:3461, RHSA-2026:3462 |
| Red Hat OpenShift AI 2.25 | Fixed | RHSA-2026:10184 |
| Red Hat OpenShift AI 3.3 | Fixed | RHSA-2026:19712, RHSA-2026:3713 |
Not affected: 3 products
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenShift AI 2.25
- Red Hat OpenShift AI 3.3
Timeline
- 2026-10-02 Threatist record created from CVE-2025-6242
- 2026-10-03 Alias added: GHSA-3f6c-7fw2-ppm4
References
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2025-6242 · CVE Program
- CVE-2025-6242 · NVD
- FIRST EPSS
- GHSA-3f6c-7fw2-ppm4 · GitHub Advisory Database · CC BY 4.0
- CVE-2025-6242 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences