PT-2025-23228 · Vllm · Vllm

Russellb · Published 2025-05-28 · Updated 2025-05-30 · CVE-2025-48944

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions vLLM versions 0.8.0 through 0.9.0

Description The vLLM backend used with the "/v1/chat/completions" API endpoint fails to validate unexpected or malformed input in the pattern and type fields when the tools functionality is invoked. These inputs are not validated before being compiled or parsed, causing a crash of the inference worker with a single request. The worker will remain down until it is restarted. The type field is expected to be one of: "string", "number", "object", "boolean", "array", or "null". Supplying any other value will cause the worker to crash. The pattern field undergoes rendering prior to being passed unsafely into the native regex compiler without validation or escaping, allowing malformed expressions to reach the underlying C++ regex engine, resulting in fatal errors.

Recommendations For versions 0.8.0 through 0.9.0, update to version 0.9.0 to fix the issue. As a temporary workaround, consider restricting access to the /v1/chat/completions API endpoint or disabling the tools functionality until a patch is available. Avoid using the pattern and type fields in the affected API endpoint until the issue is resolved.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-06583

CVE-2025-48944

GHSA-VRQ3-R879-7M65

Affected Products

Vllm

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/48xxx/CVE-2025-48944.json · Exploit
• https://github.com/vllm-project/vllm/security/advisories/GHSA-vrq3-r879-7m65 · Vendor Advisory
• https://github.com/vllm-project/vllm/pull/17623 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vrq3-r879-7m65 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-48944 · Security Note
• https://bdu.fstec.ru/vul/2026-06583 · Security Note
• https://osv.dev/vulnerability/CVE-2025-48944 · Vendor Advisory
• https://github.com/vllm-project/vllm · Note
• https://twitter.com/CVEnew/status/1928530096446677483 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1928556680888926617 · Twitter Post
• https://t.me/cvetracker/25039 · Telegram Post