V
Vendor security profile
vllm
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs67
Critical4
CISA KEV0
Public exploit26
Patch rate%73
Avg. CVSS6.8
12-month vulnerability rate
0
0
2
1
2
4
0
5
4
9
29
11
CVE KEV
CVE severity distribution
67toplam CVE
Critical4 (6%)
High24 (36%)
Medium37 (55%)
Low2 (3%)
Patch and exploitation view
%73
Verified patch
%0
CISA KEV
%39
Public exploit
49Patch available
0Partial
0Workaround
0Vendor: no patch
18Unknown
Latest vulnerabilities
5.3
CVE-2026-105922
vllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of service
V
Patch status unknownEPSS %0
5.3
CVE-2026-105775
vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds
V
Patch status unknownEPSS %0
5.3
CVE-2026-105760
vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion
V
Patch status unknownEPSS %0
5.9
CVE-2026-105759
vLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service)
V
Patch status unknownEPSS %0
5.3
CVE-2026-105758
vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach
V
Patch verifiedEPSS %0
6.5
CVE-2026-105757
vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)
V
Patch verifiedEPSS %0
6.5
CVE-2026-105756
vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service
V
Patch verifiedEPSS %0
4.2
CVE-2026-105755
vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`
V
Patch verifiedEPSS %0
6.5
CVE-2026-105754
vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features
V
Patch verifiedEPSS %0
6.5
CVE-2026-105753
vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core
V
Patch verifiedEPSS %0