CVE-2026-25960
CRITICAL EPSS 35.0%
Published Mar 9, 20263mo ago · Modified Jun 17, 20261w ago
9.8 CVSS 3.1
Published Mar 9, 2026 3mo ago
Last Modified Jun 17, 2026 1w ago
Description
vLLM is an inference and serving engine for large language models (LLMs). The SSRF protection fix for CVE-2026-24779 add in 0.15.1 can be bypassed in the load_from_url_async method due to inconsistent URL parsing behavior between the validation layer and the actual HTTP client. The SSRF fix uses urllib3.util.parse_url() to validate and extract the hostname from user-provided URLs. However, load_from_url_async uses aiohttp for making the actual HTTP requests, and aiohttp internally uses the yarl library for URL parsing. This vulnerability in 0.17.0.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
35.0% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available
Weaknesses 1
CWE-918 Server-Side Request Forgery (SSRF) Validation
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| vllm | vllm | * | ≥0.15.1 – <0.17.0 |
References 4
- github.com https://github.com/vllm-project/vllm/commit/6f3b2047abd4a748e3db4a68543f8221358002c0
- github.com https://github.com/vllm-project/vllm/pull/34743
- github.com https://github.com/vllm-project/vllm/security/advisories/GHSA-qh4c-xf7m-gxfc
- github.com https://github.com/vllm-project/vllm/security/advisories/GHSA-v359-jj2v-j536
Remediation
- github.com https://github.com/vllm-project/vllm/commit/6f3b2047abd4a748e3db4a68543f8221358002c0
- github.com https://github.com/vllm-project/vllm/pull/34743
- github.com https://github.com/vllm-project/vllm/security/advisories/GHSA-v359-jj2v-j536