Advisoriesby IbisvLLMPYSEC-2026-4186
vLLM: denial of service
Fix: upgrade to 0.27.0 or later
A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has been published and may be used. Upgrading to version 0.29.1rc0 is able to resolve this issue. This patch is called 3439bad37e68ba9755a46f4f6b44a4aeaf1f60a9. Upgrading the affected component is advised.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| vllm PyPI | < 0.27.0 | 0.27.0 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity from
- the CVSS score
- Also known as
- CVE-2026-103241
- gist.github.com/Yunzez/8e98d656aa667095b513161eb056d28e
- github.com/vllm-project/vllm/
- github.com/vllm-project/vllm/releases/tag/v0.29.1rc0
- vuldb.com/cve/CVE-2026-103241
- vuldb.com/submit/956250
- vuldb.com/vuln/411965
- vuldb.com/vuln/411965/cti
- github.com/vllm-project/vllm/commit/3439bad37e68ba9755a46f4f6b44a4aeaf1f60a9
- github.com/vllm-project/vllm/issues/50927
- github.com/vllm-project/vllm/pull/54303
More vLLM advisories
All vLLM| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Oct 5 | vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features Medium6.5Oct 5 | Medium6.5 | 0.30.0 |
| Oct 5 | vLLM: improper input validationMedium6.5Oct 5 | Medium6.5 | 0.30.0 |
| Oct 5 | vLLM: insecure direct object referenceMedium4.2Oct 5 | Medium4.2 | 0.30.0 |
| Oct 5 | vLLM: improper input validationMedium6.5Oct 5 | Medium6.5 | 0.30.0 |
| Sep 26 | vLLM through 0.29.0 fetches and fully materializes remote or inline media...Medium6.5Sep 26 | Medium6.5 | 0.30.0 |
| Sep 26 | vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against...High7.5Sep 26 | High7.5 | 0.24.0 |