# vLLM Project vulnerabilities

Source: https://junglewise.ai/threats/vendors/vllm-project  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/vendors/vllm-project.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 105 vulnerabilities in vLLM Project: 0 in the last 7 days and 55 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-115918, was published on 26 October 2026. 24 vulnerabilities in the last four weeks, down 8% on the four before (26). 1 technology has a page of its own.

## Counts

- Last 7 days: 0
- Last 30 days: 24
- Last 90 days: 55
- All time: 105 (4 critical, 0 exploited in the wild)

## About vLLM Project

An open-source project focused on developing a high-throughput and memory-efficient serving engine for large language models.

## Latest vLLM Project vulnerabilities

- [CVE-2026-115918: vLLM chat template resource exhaustion DoS](https://junglewise.ai/threats/cve-2026-115918-vllm-is-an-inference-and-serving-engine-for-large-language) (medium, CVSS 6.5, published 26 Oct 2026)
- [CVE-2026-115916: vLLM off-by-one error in tokenizer max_token_id validation](https://junglewise.ai/threats/cve-2026-115916-vllm-is-an-inference-and-serving-engine-for-large-language) (medium, CVSS 6.5, published 26 Oct 2026)
- [CVE-2026-115915: vLLM image format validation bypass in media processing](https://junglewise.ai/threats/cve-2026-115915-vllm-is-an-inference-and-serving-engine-for-large-language) (high, CVSS 8.1, published 26 Oct 2026)
- [CVE-2026-115913: vLLM Phi-4 multimodal audio encoder GPU memory exhaustion](https://junglewise.ai/threats/cve-2026-115913-vllm-is-an-inference-and-serving-engine-for-large-language) (medium, CVSS 6.5, published 26 Oct 2026)
- [CVE-2026-115912: vLLM arbitrary code execution in shared-memory multimodal cache](https://junglewise.ai/threats/cve-2026-115912-vllm-is-an-inference-and-serving-engine-for-large-language) (high, CVSS 7.5, published 26 Oct 2026)
- [CVE-2026-115911: vLLM chat template resource exhaustion denial of service](https://junglewise.ai/threats/cve-2026-115911-vllm-is-an-inference-and-serving-engine-for-large-language) (medium, CVSS 6.5, published 26 Oct 2026)
- [CVE-2026-116181: vLLM improper input validation in stop_token_ids handling](https://junglewise.ai/threats/cve-2026-116181-vllm-from-0-20-1-before-0-29-0-contains-an-improper-input) (medium, CVSS 6.5, published 25 Oct 2026)
- [CVE-2026-116180: vLLM prompt logprobs cross-tenant denial of service](https://junglewise.ai/threats/cve-2026-116180-vllm-from-0-8-5-before-0-31-0-has-a-denial-of-service-flaw) (high, CVSS 7.7, published 25 Oct 2026)
- [CVE-2026-116179: vLLM resource exhaustion in VideoMediaIO frame-count validation](https://junglewise.ai/threats/cve-2026-116179-vllm-from-0-18-0-before-0-31-0-contains-a-resource-exhaustion) (high, CVSS 7.5, published 25 Oct 2026)
- [CVE-2026-116178: vLLM denial of service in multimodal inference endpoint](https://junglewise.ai/threats/cve-2026-116178-vllm-from-0-20-0-before-0-30-0-contains-a-denial-of-service) (medium, CVSS 5.9, published 25 Oct 2026)
- [CVE-2026-116177: vLLM uncontrolled resource consumption in Nemotron-VL processor](https://junglewise.ai/threats/cve-2026-116177-vllm-from-0-10-2-before-0-25-0-contains-an-uncontrolled-resource) (high, CVSS 7.5, published 25 Oct 2026)
- [CVE-2026-116176: vLLM server-side request forgery in X-Request-Id header](https://junglewise.ai/threats/cve-2026-116176-vllm-from-0-9-2-before-0-24-0-contains-a-server-side-request) (high, CVSS 8.2, published 25 Oct 2026)
- [CVE-2026-116175: vLLM audio decompression bomb in chat completions](https://junglewise.ai/threats/cve-2026-116175-vllm-from-0-19-0-before-0-24-0-contains-a-decompression-bomb) (medium, CVSS 6.5, published 25 Oct 2026)
- [CVE-2026-116174: vLLM improper input validation in Rust gRPC Generate](https://junglewise.ai/threats/cve-2026-116174-vllm-from-0-22-0-before-0-24-0-contains-an-improper-input) (medium, CVSS 5.9, published 25 Oct 2026)
- [CVE-2026-116173: vLLM Rust gRPC denial of service via output_candidates validation bypass](https://junglewise.ai/threats/cve-2026-116173-vllm-from-0-22-0-before-0-24-0-contains-a-denial-of-service) (medium, CVSS 5.9, published 25 Oct 2026)
- [CVE-2026-116172: vLLM improper input validation in Rust gRPC converter](https://junglewise.ai/threats/cve-2026-116172-vllm-from-0-22-0-before-0-24-0-contains-an-improper-input) (medium, CVSS 5.9, published 25 Oct 2026)
- [vLLM uncontrolled resource consumption in multimodal processors](https://junglewise.ai/threats/duplicate-advisory-vllm-0-7-3-before-0-31-0-dos-via-unvalidated-mm-32363cc5) (high, CVSS 7.5, published 21 Oct 2026)
- [vLLM remote denial of service through forged multimodal UUID cache desynchronization](https://junglewise.ai/threats/duplicate-advisory-vllm-vulnerable-to-remote-denial-of-service-through-c328d8d4) (high, CVSS 7.5, published 21 Oct 2026)
- [CVE-2026-114055: vLLM uncontrolled resource consumption in multimodal processor](https://junglewise.ai/threats/cve-2026-114055-vllm-from-0-7-3-before-0-31-0-contains-an-uncontrolled-resource) (high, CVSS 7.5, published 21 Oct 2026)
- [CVE-2026-114054: vLLM cache aliasing vulnerability in multimodal and prefix-cache](https://junglewise.ai/threats/cve-2026-114054-vllm-before-0-31-0-contains-a-cache-aliasing-vulnerability-that) (medium, CVSS 6.5, published 21 Oct 2026)
- [CVE-2026-114053: vLLM remote code execution via mm_processor_kwargs.code_revision](https://junglewise.ai/threats/cve-2026-114053-vllm-from-0-7-3-before-0-31-0-forwards-the-request-supplied-mm) (high, CVSS 8.1, published 21 Oct 2026)
- [CVE-2026-114052: vLLM memory exhaustion in MOSS-Audio model serving](https://junglewise.ai/threats/cve-2026-114052-vllm-after-0-24-0-and-before-0-31-0-contains-a-memory-exhaustion) (high, CVSS 7.5, published 21 Oct 2026)
- [CVE-2026-114051: vLLM denial of service via uncaught exception in request validation](https://junglewise.ai/threats/cve-2026-114051-vllm-before-0-31-0-skips-the-min-tokens-max-tokens-check-for) (high, CVSS 7.5, published 21 Oct 2026)
- [CVE-2026-114050: vLLM multimodal UUID cache poisoning remote engine crash](https://junglewise.ai/threats/cve-2026-114050-vllm-before-0-31-0-uses-a-client-supplied-multimodal-uuid) (high, CVSS 7.5, published 21 Oct 2026)
- [CVE-2026-105922: vLLM denial of service in token binning penalty handler](https://junglewise.ai/threats/cve-2026-105922-a-security-flaw-has-been-discovered-in-vllm-project-vllm-up-to-0) (medium, CVSS 4.3, published 6 Oct 2026)

## Most severe vLLM Project vulnerabilities

- [CVE-2026-22778: vLLM remote code execution via JPEG2000 heap overflow and ASLR bypass](https://junglewise.ai/threats/cve-2026-22778-vllm-remote-code-execution-via-jpeg2000-heap-overflow-and-aslr) (critical, CVSS 9.8, published 2 Feb 2026)
- [CVE-2024-9053: vLLM remote code execution via pickle deserialization in AsyncEngineRPCServer](https://junglewise.ai/threats/cve-2024-9053-vllm-remote-code-execution-via-pickle-deserialization-in) (critical, CVSS 9.8, published 20 Mar 2025)
- [CVE-2025-47277: vLLM remote code execution via unsafe deserialization in PyNcclPipe](https://junglewise.ai/threats/cve-2025-47277-vllm-remote-code-execution-via-unsafe-deserialization-in) (critical, CVSS 9.8, published 20 May 2025)
- [CVE-2026-48746: vLLM authentication bypass in OpenAI API via Host header injection](https://junglewise.ai/threats/cve-2026-48746-vllm-authentication-bypass-in-openai-api-via-host-header) (critical, CVSS 9.1, published 22 Jun 2026)
- [CVE-2026-27893: vLLM remote code execution via hardcoded remote code trust in models](https://junglewise.ai/threats/cve-2026-27893-vllm-remote-code-execution-via-hardcoded-remote-code-trust-in) (high, CVSS 8.8, published 27 Mar 2026)
- [CVE-2025-62164: vLLM unsafe deserialization in Completions API prompt embeddings](https://junglewise.ai/threats/cve-2025-62164-vllm-unsafe-deserialization-in-completions-api-prompt-embeddings) (high, CVSS 8.8, published 21 Nov 2025)
- [CVE-2026-22807: vLLM arbitrary code execution via auto_map dynamic module loading](https://junglewise.ai/threats/cve-2026-22807-vllm-arbitrary-code-execution-via-auto-map-dynamic-module-loading) (high, CVSS 8.8, published 21 Jan 2026)
- [CVE-2026-56340: vLLM improper input validation in multimodal embeddings](https://junglewise.ai/threats/cve-2026-56340-vllm-improper-input-validation-in-multimodal-embeddings) (high, CVSS 8.8, published 20 Jun 2026)
- [CVE-2026-54232: vLLM dependency confusion in Dockerfile via flashinfer-jit-cache](https://junglewise.ai/threats/cve-2026-54232-vllm-dependency-confusion-in-dockerfile-via-flashinfer-jit-cache) (high, CVSS 8.8, published 22 Jun 2026)
- [CVE-2026-4944: vLLM remote code execution via hardcoded trust_remote_code parameter](https://junglewise.ai/threats/cve-2026-4944-vllm-remote-code-execution-via-hardcoded-trust-remote-code) (high, CVSS 8.8, published 28 May 2026)

## Vulnerabilities per week

24 vulnerabilities in the last four weeks, down 8% on the four before (26).

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 2 | 0 | 0 |
| 24 Aug 2026 | 1 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 2 | 0 | 0 |
| 14 Sep 2026 | 6 | 0 | 0 |
| 21 Sep 2026 | 13 | 0 | 0 |
| 28 Sep 2026 | 1 | 0 | 0 |
| 5 Oct 2026 | 6 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 18 | 0 | 0 |
| 26 Oct 2026 | 6 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## vLLM Project technologies

- [vLLM Project vLLM](https://junglewise.ai/threats/technologies/vllm-project-vllm): 103 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "vLLM Project vulnerabilities", https://junglewise.ai/threats/vendors/vllm-project, 12 November 2026.