VL
Product
vllm
112
CVEs
0
On KEV
9.8
Max CVSS
29
New 30D
Severity mix
Critical 9High 45Medium 55Low 3
Watch
Add vllm to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105752 | 3.1 | Oct 5 | vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle Affected: before 0.30.0 |
| CVE-2025-46570 | 2.6 | May 29 | vLLM’s Chunk-Based Prefix Caching Vulnerable to Potential Timing Side-Channel Affected: before 0.9.0 |
| CVE-2025-25183 | 2.6 | Feb 7 | vLLM using built-in hash() from Python 3.12 leads to predictable hash collisions in vLLM prefix cache Affected: before 0.7.2 |
Showing 3