V
Vendor security profile
vllm-project
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs52
Critical1
CISA KEV0
Public exploit19
Patch rate%71
Avg. CVSS6.6
12-month vulnerability rate
0
0
0
0
0
2
0
2
0
8
29
11
CVE KEV
CVE severity distribution
52toplam CVE
Critical1 (2%)
High15 (29%)
Medium34 (65%)
Low2 (4%)
Patch and exploitation view
%71
Verified patch
%0
CISA KEV
%37
Public exploit
37Patch available
0Partial
0Workaround
0Vendor: no patch
15Unknown
Latest vulnerabilities
5.3
CVE-2026-105922
vllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of service
V
Patch status unknownEPSS %0
5.3
CVE-2026-105775
vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds
V
Patch status unknownEPSS %0
5.3
CVE-2026-105760
vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion
V
Patch status unknownEPSS %0
5.9
CVE-2026-105759
vLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service)
V
Patch status unknownEPSS %0
5.3
CVE-2026-105758
vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach
V
Patch verifiedEPSS %0
6.5
CVE-2026-105757
vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)
V
Patch verifiedEPSS %0
6.5
CVE-2026-105756
vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service
V
Patch verifiedEPSS %0
4.2
CVE-2026-105755
vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`
V
Patch verifiedEPSS %0
6.5
CVE-2026-105754
vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features
V
Patch verifiedEPSS %0
6.5
CVE-2026-105753
vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core
V
Patch verifiedEPSS %0