vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled

vLLM: Dependency Confusion Vulnerability in vLLM Dockerfile

vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out

vLLM vulnerable to remote code execution via transformers_utils/get_config

VLLM deserialization vulnerability leading to DoS and potential RCE

vLLM allows a malicious model RCE by torch.load in hf_model_weights_iterator

vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector

vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision

Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration

vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processor

vLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensors

vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override

vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders

vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass

vLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate

vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_ids

vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n

vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs

vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargs

vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generate

vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUID

vLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service)

vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of service

vLLM 0.22.0 through 0.23.0 Denial of Service via stop_token_ids

vLLM before 0.29.0 CPU Exhaustion via unbounded cache_salt

vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision

vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_size

vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading Sessions

vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure

vLLM through 0.29.0 Denial of Service via Incomplete NIXL KV Transfer Metadata

vLLM before 0.28.0 Denial of Service via negative token ID

vLLM through 0.29.0 Memory Exhaustion via Rejected Requests

vLLM before 0.28.0 Denial of Service via audio extraction

vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends

vLLM: Remote DoS in vLLM via Invalid Recovered Token Reinjection

vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution

vLLM GGUF Kernels: int64_t to int truncation of tensor dimensions causes GPU buffer overflow

vLLM: Remote DoS via Special-Token Placeholders

vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions

vLLM vulnerable to timing attack at bearer auth

vLLM API endpoints vulnerable to Denial of Service Attacks

vLLM phi4mm: Quadratic Time Complexity in Input Token Processing​ leads to denial of service

Data exposure via ZeroMQ on multi-node vLLM deployment

vLLM has a Weakness in MultiModalHasher Image Hashing Implementation

vLLM: Downmix Implementation Differences as Attack Vectors Against Audio AI Models

vLLM vulnerable to Server-Side Request Forgery (SSRF) in `MediaConnector`