Skip to content
fr Sign in
6.9 Medium

CVE-2026-103241 A flaw has been found in vllm-project vLLM up to 0.26.0

Description

A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has been published and may be used. Upgrading to version 0.29.1rc0 is able to resolve this issue. This patch is called 3439bad37e68ba9755a46f4f6b44a4aeaf1f60a9. Upgrading the affected component is advised.

Affected products and versions

Product Affected versions Fixed in
vllm 0.29 earliest → < 0.29.1rc0 0.29.1rc0
vllm 0.26.0 No fix stated
vllm 0.25 No fix stated
vllm 0.24 No fix stated
vllm 0.23 No fix stated
vllm 0.22 No fix stated
vllm 0.21 No fix stated
vllm 0.20 No fix stated
vllm 0.19 No fix stated
Show the 18 other branches
Product Affected versions Fixed in
vllm 0.18 No fix stated
vllm 0.17 No fix stated
vllm 0.16 No fix stated
vllm 0.15 No fix stated
vllm 0.14 No fix stated
vllm 0.13 No fix stated
vllm 0.12 No fix stated
vllm 0.11 No fix stated
vllm 0.10 No fix stated
vllm 0.9 No fix stated
vllm 0.8 No fix stated
vllm 0.7 No fix stated
vllm 0.6 No fix stated
vllm 0.5 No fix stated
vllm 0.4 No fix stated
vllm 0.3 No fix stated
vllm 0.2 No fix stated
vllm 0.1 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of vllm

The 121 CVEs of vllm →
CVE-2026-115918 vLLM is an inference and serving engine for large language models 6.5 Medium CVE-2026-115917 vLLM is an inference and serving engine for large language models 3.4 Low CVE-2026-115916 vLLM is an inference and serving engine for large language models 6.5 Medium CVE-2026-115915 vLLM is an inference and serving engine for large language models 8.1 High
Track this CVE