DeutschShown in its original language — a full translation is planned for a future version.
vllm: Schwachstelle ermöglicht Codeausführung
view advisory published 2026-02-02
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in vllm ausnutzen, um beliebigen Programmcode auszuführen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-22778US | — | Exploit | ||
vLLM is an inference and serving engine for large language models (LLMs). From 0.8.3 to before 0.14.1, when an invalid image is sent to vLLM's multimodal endpoint, PIL throws an er… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:19712 vom 2026-05-21external
- Red Hat Security Advisory RHSA-2026:30087 vom 2026-06-25external
- Red Hat Security Advisory RHSA-2026:30088 vom 2026-06-25external
- Red Hat Security Advisory RHSA-2026:30089 vom 2026-06-25external
- Red Hat Security Advisory RHSA-2026:3461 vom 2026-02-27external
- Red Hat Security Advisory RHSA-2026:3462 vom 2026-02-27external
- Red Hat Security Advisory RHSA-2026:3713 vom 2026-03-04external
- Red Hat Security Advisory RHSA-2026:3782 vom 2026-03-04external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan