PT-2026-24113 · Vllm · Vllm

Racerz-Fighting · Published 2025-08-21 · Updated 2026-03-09 · CVE-2026-25960

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.15.1 vLLM version 0.17.0

Description vLLM is an inference and serving engine for large language models (LLMs). A Server-Side Request Forgery (SSRF) protection mechanism implemented in version 0.15.1 can be bypassed in the load from url async method. This bypass occurs due to inconsistent URL parsing behavior between the validation layer and the actual HTTP client. The validation layer uses urllib3.util.parse url() while the HTTP client uses aiohttp with the yarl library for URL parsing. These parsers handle backslash characters (``) differently, allowing an attacker to bypass the hostname allowlist check and potentially access arbitrary internal or external services, resulting in a full SSRF attack. The vulnerable component is located in the vllm/connections.py file, specifically within the load from url async function. The attack scenario involves providing a malicious URL such as https://[e-mail]/.

Recommendations Versions prior to 0.15.1: Update to version 0.15.1 or later. Version 0.17.0: Update to a newer version that addresses the inconsistent URL parsing behavior.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2026-06585

CVE-2026-25960

GHSA-QH4C-XF7M-GXFC

GHSA-V359-JJ2V-J536

Affected Products

Vllm

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25960.json · Exploit
• https://github.com/vllm-project/vllm/security/advisories/GHSA-v359-jj2v-j536 · Vendor Advisory
• https://github.com/vllm-project/vllm/pull/34743 · Patch
• https://github.com/vllm-project/vllm/commit/6f3b2047abd4a748e3db4a68543f8221358002c0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-24779 · Security Note
• https://bdu.fstec.ru/vul/2026-06585 · Security Note
• https://osv.dev/vulnerability/GHSA-qh4c-xf7m-gxfc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25960 · Security Note
• https://osv.dev/vulnerability/GHSA-v359-jj2v-j536 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-25960 · Vendor Advisory
• https://github.com/vllm-project/vllm · Note
• https://github.com/vllm-project/vllm/security/advisories/GHSA-qh4c-xf7m-gxfc · Note
• https://github.com/vllm-project/vllm/commit/f46d576c54fb8aeec5fc70560e850bed38ef17d7 · Note
• https://github.com/vllm-project/vllm/pull/32746 · Note
• https://twitter.com/CVEnew/status/2031122511857950828 · Twitter Post