RHSA-2026:83112
Vulnerability from csaf_redhat - Published: 2026-10-14 19:01 - Updated: 2026-10-15 13:00Summary
Red Hat Security Advisory: Red Hat AI Inference 3.4.6 (cpu)
Severity
Important
Notes
Topic: Red Hat AI Inference 3.4.6 (cpu) is now available.
Details: Red Hat AI Inference
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Hugging Face PyTorch Image Models. A remote attacker could exploit a deserialization of untrusted data vulnerability by enticing a user to visit a malicious page or open a malicious file. This could lead to arbitrary code execution in the context of the current process. The flaw exists due to insufficient validation of user-supplied data during the parsing of checkpoints.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in vLLM. Remote attackers can exploit this vulnerability by providing a URL to an excessively large media file. The AsyncMediaIO.fetch_audio and AsyncMediaIO.fetch_image functions, responsible for fetching user-supplied media, do not limit the response size. This oversight allows an attacker to exhaust server memory, leading to a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in vLLM, a library for Large Language Model (LLM) inference and serving. A remote attacker, authorized to make a /v1/completions request, can send a specially crafted prompt embeds payload. This action causes the EngineCore to fail an assertion and fatally crash, leading to a Denial of Service (DoS) for the entire server application.
6.5 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Moderate
A flaw was found in vLLM. An unauthenticated attacker can exploit an input validation vulnerability by submitting negative token IDs to the /v1/embeddings and /pooling endpoints. This action triggers a CUDA device-side assertion, which poisons the GPU context and causes the engine to crash. Consequently, all subsequent requests will fail until the process is restarted, leading to a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security (TLS) settings inadvertently overwrite the proxy's TLS configuration, which can disable certificate verification on reused connection contexts. Consequently, an attacker can impersonate the proxy to monitor or modify forwarded traffic or capture client credentials.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in urllib3. A malicious server can trigger a Denial of Service (DoS) by returning a specially crafted compressed response containing trailing bytes. When streaming the response in chunks, the decompression logic can enter an infinite loop by repeatedly processing unconsumed data without making progress. This issue leads to excessive CPU utilization and prevents the affected network request from completing.
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Moderate
A flaw was found in urllib3. This flaw allows a Denial of Service (DoS) through unbounded memory allocation when parsing chunk-encoded responses. A malicious server can send an excessively long chunk-size line without a newline, exhausting client memory and terminating the application.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in vLLM. The system fully downloads and decodes remote or embedded media files before enforcing configured size and quantity restrictions. A remote attacker can exploit this vulnerability by submitting requests containing excessively large or numerous media payloads, forcing the server to consume excessive memory and network bandwidth. This resource exhaustion can lead to a Denial of Service (DoS), rendering the service unresponsive or causing it to crash.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in PyJWT. This vulnerability allows an unauthenticated remote attacker to bypass authentication by forging arbitrary JSON Web Tokens (JWTs). When an application allows both symmetric and asymmetric algorithms, PyJWT fails to properly validate public JSON Web Key (JWK) container representations, mistakenly accepting public key material as a symmetric Hash-based Message Authentication Code (HMAC) secret. As a result, an attacker with knowledge of the public key can generate validly signed tokens with arbitrary authenticated claims.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in werkzeug. A remote attacker can cause a Denial of Service (DoS) when an application runs on Windows systems using the NTFS file system. By supplying a file path containing a reserved Windows device name with an Alternate Data Stream (ADS) marker, an attacker can bypass path sanitization in safe_join(). This causes the server to hang indefinitely while attempting to read the special device, making the service unavailable to users.
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Moderate
A flaw was found in fsspec. This vulnerability allows a remote attacker to execute arbitrary code by tricking an application into loading a maliciously crafted reference document, such as a Kerchunk metadata file. When the reference filesystem is opened, unrestricted template evaluation executes embedded expressions in the context of the running process.
8.8 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Important
A flaw was found in multidict. The multidict C extension fails to release object references during certain items-view union and subtraction operations. An attacker could exploit this vulnerability by supplying crafted input sequences to applications performing these operations, triggering uncollectable memory leaks. This issue can cause unbounded process memory growth, ultimately leading to a Denial of Service (DoS).
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-15679
Threats
Impact
Moderate
References
102 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat AI Inference 3.4.6 (cpu) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat AI Inference",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:83112",
"url": "https://access.redhat.com/errata/RHSA-2026:83112"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-100650",
"url": "https://access.redhat.com/security/cve/CVE-2026-100650"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102273",
"url": "https://access.redhat.com/security/cve/CVE-2026-102273"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102598",
"url": "https://access.redhat.com/security/cve/CVE-2026-102598"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-104851",
"url": "https://access.redhat.com/security/cve/CVE-2026-104851"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-104874",
"url": "https://access.redhat.com/security/cve/CVE-2026-104874"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15679",
"url": "https://access.redhat.com/security/cve/CVE-2026-15679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-37237",
"url": "https://access.redhat.com/security/cve/CVE-2026-37237"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55514",
"url": "https://access.redhat.com/security/cve/CVE-2026-55514"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-93592",
"url": "https://access.redhat.com/security/cve/CVE-2026-93592"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-97687",
"url": "https://access.redhat.com/security/cve/CVE-2026-97687"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-97688",
"url": "https://access.redhat.com/security/cve/CVE-2026-97688"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-97689",
"url": "https://access.redhat.com/security/cve/CVE-2026-97689"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://www.redhat.com/en/products/ai/inference-server",
"url": "https://www.redhat.com/en/products/ai/inference-server"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83112.json"
}
],
"title": "Red Hat Security Advisory: Red Hat AI Inference 3.4.6 (cpu)",
"tracking": {
"current_release_date": "2026-10-15T13:00:28+00:00",
"generator": {
"date": "2026-10-15T13:00:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.2"
}
},
"id": "RHSA-2026:83112",
"initial_release_date": "2026-10-14T19:01:34+00:00",
"revision_history": [
{
"date": "2026-10-14T19:01:34+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-14T19:01:39+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-15T13:00:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat AI Inference Server 3.4",
"product": {
"name": "Red Hat AI Inference Server 3.4",
"product_id": "Red Hat AI Inference Server 3.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ai_inference_server:3.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat AI Inference Server"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64",
"product": {
"name": "registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64",
"product_id": "registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vllm-cpu-rhel9@sha256%3Af8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a?arch=amd64\u0026repository_url=registry.redhat.io/rhaii/vllm-cpu-rhel9\u0026tag=1791857301"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64 as a component of Red Hat AI Inference Server 3.4",
"product_id": "Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
},
"product_reference": "registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64",
"relates_to_product_reference": "Red Hat AI Inference Server 3.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-15679",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-08-20T16:46:50.721906+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520600"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Hugging Face PyTorch Image Models. A remote attacker could exploit a deserialization of untrusted data vulnerability by enticing a user to visit a malicious page or open a malicious file. This could lead to arbitrary code execution in the context of the current process. The flaw exists due to insufficient validation of user-supplied data during the parsing of checkpoints.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "timm: Hugging Face PyTorch Image Models: Remote Code Execution via Deserialization of Untrusted Data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15679"
},
{
"category": "external",
"summary": "RHBZ#2520600",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520600"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15679"
},
{
"category": "external",
"summary": "https://www.zerodayinitiative.com/advisories/ZDI-26-523/",
"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-523/"
}
],
"release_date": "2026-08-20T16:24:53.352000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:01:34+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83112",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83112"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "timm: Hugging Face PyTorch Image Models: Remote Code Execution via Deserialization of Untrusted Data"
},
{
"cve": "CVE-2026-37237",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-28T15:32:49.244896+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2525629"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM. Remote attackers can exploit this vulnerability by providing a URL to an excessively large media file. The AsyncMediaIO.fetch_audio and AsyncMediaIO.fetch_image functions, responsible for fetching user-supplied media, do not limit the response size. This oversight allows an attacker to exhaust server memory, leading to a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Denial of Service via memory exhaustion from oversized media files",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-37237"
},
{
"category": "external",
"summary": "RHBZ#2525629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-37237",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-37237"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-37237",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-37237"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/blob/main/vllm/multimodal/inputs.py",
"url": "https://github.com/vllm-project/vllm/blob/main/vllm/multimodal/inputs.py"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/36506",
"url": "https://github.com/vllm-project/vllm/pull/36506"
},
{
"category": "external",
"summary": "https://s00me00ne.com/cve/cve-2026-37237/",
"url": "https://s00me00ne.com/cve/cve-2026-37237/"
}
],
"release_date": "2026-08-28T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:01:34+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83112",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83112"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vllm: vLLM: Denial of Service via memory exhaustion from oversized media files"
},
{
"cve": "CVE-2026-55514",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-07-06T21:01:24.119563+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497504"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, a library for Large Language Model (LLM) inference and serving. A remote attacker, authorized to make a /v1/completions request, can send a specially crafted prompt embeds payload. This action causes the EngineCore to fail an assertion and fatally crash, leading to a Denial of Service (DoS) for the entire server application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Denial of Service via crafted prompt in /v1/completions request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate-impact flaw in vLLM, as used in Red Hat AI Inference Server, Red Hat OpenShift AI, and Red Hat Enterprise Linux AI, allows a remote, authenticated attacker to trigger a denial of service. By sending a specially crafted prompt embeds payload to the `/v1/completions` endpoint with a model utilizing M-RoPE, the attacker can cause the EngineCore to crash, leading to the unavailability of the server application. This issue requires prior authorization to make requests to the `/v1/completions` endpoint.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55514"
},
{
"category": "external",
"summary": "RHBZ#2497504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497504"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55514",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55514"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55514",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55514"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/470229c37efaf69c86e8bc97482b0b1ff7551c65",
"url": "https://github.com/vllm-project/vllm/commit/470229c37efaf69c86e8bc97482b0b1ff7551c65"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/45252",
"url": "https://github.com/vllm-project/vllm/pull/45252"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/releases/tag/v0.24.0",
"url": "https://github.com/vllm-project/vllm/releases/tag/v0.24.0"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-33cg-gxv8-3p8g",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-33cg-gxv8-3p8g"
}
],
"release_date": "2026-07-06T20:07:40.405000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:01:34+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83112",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83112"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vllm: vLLM: Denial of Service via crafted prompt in /v1/completions request"
},
{
"cve": "CVE-2026-93592",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-09-22T18:39:16.640215+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2538478"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM. An unauthenticated attacker can exploit an input validation vulnerability by submitting negative token IDs to the /v1/embeddings and /pooling endpoints. This action triggers a CUDA device-side assertion, which poisons the GPU context and causes the engine to crash. Consequently, all subsequent requests will fail until the process is restarted, leading to a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Denial of Service via negative token ID input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has evaluated this vulnerability as having an Important severity because an unauthenticated remote attacker can completely disrupt the inference engine with a single payload. In Red Hat OpenShift AI and Red Hat AI Inference Server deployments exposing embedding or pooling models, processing negative token inputs causes an unrecoverable GPU context failure. This fault halts the entire serving process and prevents subsequent client requests from being handled until the container or process is restarted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-93592"
},
{
"category": "external",
"summary": "RHBZ#2538478",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538478"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-93592",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93592"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93592",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93592"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-25q3-v2hm-8vpf",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-25q3-v2hm-8vpf"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/vllm-before-0.28.0-denial-of-service-via-negative-token-id",
"url": "https://www.vulncheck.com/advisories/vllm-before-0.28.0-denial-of-service-via-negative-token-id"
}
],
"release_date": "2026-09-18T13:20:05.365000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:01:34+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83112",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83112"
},
{
"category": "workaround",
"details": "Restrict access to the inference service or filter requests at an upstream reverse proxy or API gateway:\n\n1. Limit network access: Deploy firewall rules or OpenShift NetworkPolicies so that the inference server ports and endpoints are accessible only by authenticated, trusted internal clients.\n2. Ingress request validation: Configure an API gateway or reverse proxy placed in front of the model server to inspect request payloads for the `/v1/embeddings` and `/pooling` endpoints, rejecting requests where the `input` array contains negative numbers, or restricting untrusted clients to submitting text prompt strings rather than raw token lists.\n\nCaveats: Inspecting request bodies at an intermediary gateway layer may introduce slight processing latency. Modifying reverse proxy rules or applying network policies may require a service configuration reload or restart, which can temporarily disrupt in-flight connections.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vllm: vLLM: Denial of Service via negative token ID input"
},
{
"cve": "CVE-2026-97687",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-09-29T15:44:25.449046+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543255"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3. This vulnerability allows a remote attacker on the network to intercept and alter data transmitted through an HTTPS proxy. The issue occurs when target-server Transport Layer Security (TLS) settings inadvertently overwrite the proxy\u0027s TLS configuration, which can disable certificate verification on reused connection contexts. Consequently, an attacker can impersonate the proxy to monitor or modify forwarded traffic or capture client credentials.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97687"
},
{
"category": "external",
"summary": "RHBZ#2543255",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543255"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97687",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97687"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97687",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97687"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465",
"url": "https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3",
"url": "https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/pull/5093",
"url": "https://github.com/urllib3/urllib3/pull/5093"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
"url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77"
}
],
"release_date": "2026-09-29T15:30:27.136000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:01:34+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83112",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83112"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override"
},
{
"cve": "CVE-2026-97688",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-09-29T15:43:46.798686+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543253"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3. A malicious server can trigger a Denial of Service (DoS) by returning a specially crafted compressed response containing trailing bytes. When streaming the response in chunks, the decompression logic can enter an infinite loop by repeatedly processing unconsumed data without making progress. This issue leads to excessive CPU utilization and prevents the affected network request from completing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service via infinite loop during chunked Deflate decoding",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97688"
},
{
"category": "external",
"summary": "RHBZ#2543253",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543253"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97688",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97688"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97688",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97688"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f",
"url": "https://github.com/urllib3/urllib3/commit/ea2ad7b21a80da3632f80016526a18864586077f"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
"url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gh4c-6fx4-qh6g"
}
],
"release_date": "2026-09-29T15:32:17.622000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:01:34+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83112",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83112"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "urllib3: urllib3: Denial of Service via infinite loop during chunked Deflate decoding"
},
{
"cve": "CVE-2026-97689",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-09-29T15:41:38.807723+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543245"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3. This flaw allows a Denial of Service (DoS) through unbounded memory allocation when parsing chunk-encoded responses. A malicious server can send an excessively long chunk-size line without a newline, exhausting client memory and terminating the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97689"
},
{
"category": "external",
"summary": "RHBZ#2543245",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543245"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97689",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97689"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97689",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97689"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed",
"url": "https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/releases/tag/2.8.0",
"url": "https://github.com/urllib3/urllib3/releases/tag/2.8.0"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw"
}
],
"release_date": "2026-09-29T15:36:05.963000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:01:34+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83112",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83112"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser"
},
{
"cve": "CVE-2026-100650",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-09-26T13:41:54.839516+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2541909"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM. The system fully downloads and decodes remote or embedded media files before enforcing configured size and quantity restrictions. A remote attacker can exploit this vulnerability by submitting requests containing excessively large or numerous media payloads, forcing the server to consume excessive memory and network bandwidth. This resource exhaustion can lead to a Denial of Service (DoS), rendering the service unresponsive or causing it to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Denial of Service via unbounded media ingestion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity flaw because it can be triggered remotely without authentication to crash the inference service via resource exhaustion, completely disrupting model serving availability. In Red Hat Enterprise Linux AI and OpenShift AI environments, deployments hosting vLLM handle multi-modal requests or tokenization operations where input acquisition occurs prior to applying payload size constraints. Because excessive system memory and outbound bandwidth can be consumed before request rejection occurs, an adversary can exhaust container resources, though the flaw does not allow code execution or data exposure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-100650"
},
{
"category": "external",
"summary": "RHBZ#2541909",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2541909"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-100650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100650"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-100650",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100650"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/752a3a504485790a2e8491cacbb35c137339ad34",
"url": "https://github.com/vllm-project/vllm/commit/752a3a504485790a2e8491cacbb35c137339ad34"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-p6g9-7v3x-m8mv",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-p6g9-7v3x-m8mv"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/vllm-before-0.29.0-resource-exhaustion-via-unbounded-media-materialization",
"url": "https://www.vulncheck.com/advisories/vllm-before-0.29.0-resource-exhaustion-via-unbounded-media-materialization"
}
],
"release_date": "2026-09-26T13:23:20.418000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:01:34+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83112",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83112"
},
{
"category": "workaround",
"details": "Limit network exposure to the vLLM inference service and block outbound network connections from the serving host or container to prevent fetching untrusted external media:\n\n1. Restrict inbound access using firewall rules so only trusted client networks or API gateways can reach the inference port (e.g., port 8000):\n# firewall-cmd --zone=public --remove-port=8000/tcp --permanent\n# firewall-cmd --zone=trusted --add-source=\u003cTRUSTED_IP_OR_CIDR\u003e --permanent\n# firewall-cmd --reload\n\n2. In OpenShift AI environments, apply a Kubernetes NetworkPolicy to the pod namespace to restrict ingress traffic strictly to authorized proxy pods, and apply an egress rule that blocks outbound internet access, preventing the service from downloading arbitrary remote media URLs.\n\n3. Enforce maximum request body size limits on upstream reverse proxies or ingress controllers to drop oversized inline base64 payloads before forwarding requests to the inference backend.\n\nCaveats:\nRestricting egress traffic will prevent valid remote media references from being processed if external multi-modal inputs are expected. Modifying firewall rules or reloading network services may briefly interrupt active connections.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vllm: vLLM: Denial of Service via unbounded media ingestion"
},
{
"cve": "CVE-2026-102273",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-09-28T20:52:12.127939+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542697"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT. This vulnerability allows an unauthenticated remote attacker to bypass authentication by forging arbitrary JSON Web Tokens (JWTs). When an application allows both symmetric and asymmetric algorithms, PyJWT fails to properly validate public JSON Web Key (JWK) container representations, mistakenly accepting public key material as a symmetric Hash-based Message Authentication Code (HMAC) secret. As a result, an attacker with knowledge of the public key can generate validly signed tokens with arbitrary authenticated claims.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this vulnerability as Important because an attacker with access to a public verification key can forge cryptographic tokens to bypass authentication, allowing impersonation of privileged users and unauthorized access to protected application resources. Exploitation is limited to environments where applications concurrently permit symmetric HMAC and asymmetric algorithms while passing public key containers into validation routines.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102273"
},
{
"category": "external",
"summary": "RHBZ#2542697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542697"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102273",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102273"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102273",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102273"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95",
"url": "https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0",
"url": "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w"
}
],
"release_date": "2026-09-28T20:38:28.161000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:01:34+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83112",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83112"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: pyjwt: Token forgery via acceptance of public JWK containers as HMAC secrets"
},
{
"cve": "CVE-2026-102598",
"cwe": {
"id": "CWE-66",
"name": "Improper Handling of File Names that Identify Virtual Resources"
},
"discovery_date": "2026-09-29T15:31:35.018610+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543241"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in werkzeug. A remote attacker can cause a Denial of Service (DoS) when an application runs on Windows systems using the NTFS file system. By supplying a file path containing a reserved Windows device name with an Alternate Data Stream (ADS) marker, an attacker can bypass path sanitization in safe_join(). This causes the server to hang indefinitely while attempting to read the special device, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "werkzeug: werkzeug: Denial of Service via safe_join() Windows special device paths",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102598"
},
{
"category": "external",
"summary": "RHBZ#2543241",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543241"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102598"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102598",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102598"
},
{
"category": "external",
"summary": "https://github.com/pallets/werkzeug/commit/8d77320bcdf3a34941ec06dcf16b03c065cd21b6",
"url": "https://github.com/pallets/werkzeug/commit/8d77320bcdf3a34941ec06dcf16b03c065cd21b6"
},
{
"category": "external",
"summary": "https://github.com/pallets/werkzeug/pull/3309",
"url": "https://github.com/pallets/werkzeug/pull/3309"
},
{
"category": "external",
"summary": "https://github.com/pallets/werkzeug/releases/tag/3.1.9",
"url": "https://github.com/pallets/werkzeug/releases/tag/3.1.9"
},
{
"category": "external",
"summary": "https://github.com/pallets/werkzeug/security/advisories/GHSA-g6x2-hccm-hh4m",
"url": "https://github.com/pallets/werkzeug/security/advisories/GHSA-g6x2-hccm-hh4m"
}
],
"release_date": "2026-09-29T15:16:28.900000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:01:34+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83112",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83112"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "werkzeug: werkzeug: Denial of Service via safe_join() Windows special device paths"
},
{
"cve": "CVE-2026-104851",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-10-02T16:51:40.330346+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545294"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fsspec. This vulnerability allows a remote attacker to execute arbitrary code by tricking an application into loading a maliciously crafted reference document, such as a Kerchunk metadata file. When the reference filesystem is opened, unrestricted template evaluation executes embedded expressions in the context of the running process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fsspec: fsspec: Arbitrary code execution via crafted reference documents",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-104851"
},
{
"category": "external",
"summary": "RHBZ#2545294",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545294"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-104851",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-104851"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-104851",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104851"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/commit/86438783f93b1398ef245b92f0e6063b445b611c",
"url": "https://github.com/fsspec/filesystem_spec/commit/86438783f93b1398ef245b92f0e6063b445b611c"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/commit/a1c16ab3f07f354aa371c38f7b1b07ea7fd4c5c8",
"url": "https://github.com/fsspec/filesystem_spec/commit/a1c16ab3f07f354aa371c38f7b1b07ea7fd4c5c8"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/pull/2029",
"url": "https://github.com/fsspec/filesystem_spec/pull/2029"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/pull/2039",
"url": "https://github.com/fsspec/filesystem_spec/pull/2039"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/releases/tag/2026.6.0",
"url": "https://github.com/fsspec/filesystem_spec/releases/tag/2026.6.0"
},
{
"category": "external",
"summary": "https://github.com/fsspec/filesystem_spec/security/advisories/GHSA-27vj-qcqg-25rc",
"url": "https://github.com/fsspec/filesystem_spec/security/advisories/GHSA-27vj-qcqg-25rc"
}
],
"release_date": "2026-10-02T16:36:48.513000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:01:34+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83112",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83112"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fsspec: fsspec: Arbitrary code execution via crafted reference documents"
},
{
"cve": "CVE-2026-104874",
"cwe": {
"id": "CWE-911",
"name": "Improper Update of Reference Count"
},
"discovery_date": "2026-10-02T20:30:56.060026+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545386"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in multidict. The multidict C extension fails to release object references during certain items-view union and subtraction operations. An attacker could exploit this vulnerability by supplying crafted input sequences to applications performing these operations, triggering uncollectable memory leaks. This issue can cause unbounded process memory growth, ultimately leading to a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "multidict: multidict: Denial of Service via memory leak in items-view operations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having Moderate impact for Red Hat products because triggering the memory leak requires an application to evaluate specific items-view set operations against untrusted user input, which is uncommon across standard deployments. While multiple Red Hat services bundle multidict, exploitation is limited to gradual memory exhaustion and denial of service, with no possibility of remote code execution or data disclosure. Furthermore, standard dictionary access patterns, forward unions, and intersections are not susceptible to this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-104874"
},
{
"category": "external",
"summary": "RHBZ#2545386",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545386"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-104874",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-104874"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-104874",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-104874"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/multidict/commit/350b4a07bf8ff851b6d7544e81b1c748bdc74c40",
"url": "https://github.com/aio-libs/multidict/commit/350b4a07bf8ff851b6d7544e81b1c748bdc74c40"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/multidict/releases/tag/v6.9.1",
"url": "https://github.com/aio-libs/multidict/releases/tag/v6.9.1"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/multidict/security/advisories/GHSA-54p9-h82j-f925",
"url": "https://github.com/aio-libs/multidict/security/advisories/GHSA-54p9-h82j-f925"
}
],
"release_date": "2026-10-02T20:21:50.903000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T19:01:34+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:83112",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83112"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:f8a692451f509d11bf166288d614660cf8c15bab7494a822276bf458cfeb757a_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "multidict: multidict: Denial of Service via memory leak in items-view operations"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…