Skip to content
fr Sign in
6.5 Medium

CVE-2026-115918 vLLM is an inference and serving engine for large language models

Description

vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint allows an authenticated caller to place an attacker-controlled template in chat_template_kwargs[chat_template] when no server template is configured. ChatParams.get_apply_chat_template_kwargs() preserves that value without enforcing trust_request_chat_template, so the request can bypass the intended trust policy and cause CPU or memory exhaustion through Jinja rendering. This issue is fixed in version 0.32.0.

Affected products and versions

Product Affected versions Fixed in
vllm 0.16 0.16.0 → < 0.32.0 0.32.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of vllm

The 121 CVEs of vllm →
CVE-2026-115917 vLLM is an inference and serving engine for large language models 3.4 Low CVE-2026-115916 vLLM is an inference and serving engine for large language models 6.5 Medium CVE-2026-115915 vLLM is an inference and serving engine for large language models 8.1 High CVE-2026-115914 vLLM is an inference and serving engine for large language models 6.5 Medium
Track this CVE