CVE-2026-47155: vllm-project vllm
Vulnerability summary
CVE-2026-47155 is a medium (CVSS 6.5) vulnerability in vllm-project vllm. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.3% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
- 22-06-2026PublishedVulnerability first disclosed.
- 23-06-2026Last modifiedVulnerability information updated.
Description
vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, vLLM's revision pinning controls do not consistently apply to all artifacts loaded for a model. A deployment that supplies --revision or --code-revision can still load dynamic code, GGUF files, image processors, retrieval side weights, or same-repository subfolder weights/config from an unpinned/default revision. This is a supply-chain integrity issue for pinned vLLM deployments. Operators can believe they are serving a reviewed model revision while vLLM resolves behavior-affecting nested or sibling artifacts outside that reviewed revision. This vulnerability is fixed in 0.22.0.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · PypiEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
- OSV · ChainguardEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
- NVDNIST6.5MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
EPSS trend
Probability
0.25%
Chance of exploitation in the next 30 days
Percentile
15%
Versus all other CVEs
30-day change
0.00 pp
From 0.25% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard14 products
- lmcache-cuda-12.8All versions (No fix recorded)
- nemo-rl-cuda-13.0-vllmAll versions (No fix recorded)
- py3.10-vllm-cuda-12.4All versions (No fix recorded)
- py3.10-vllm-cuda-12.9All versions (No fix recorded)
- py3.10-vllm-cuda-13.0All versions (No fix recorded)
PyPI1 product
- vllm< 0.22.0
Vllm1 product
- vllm< 0.22.0
Vllm-project1 product
- vllm< 0.22.0
4 vendors · 17 products
References
8 links- github.com/vllm-project/vllm/security/advisories/GHSA-3ww4-5jv9-j5gmX Refsource CONFIRMWEBAdvisoryThird Party Advisory
- github.com/vllm-project/vllm/commit/d26a28ab033697f55a1414b5b0435de7cd6045b6X Refsource MISCWEBFIXPatch
- huntr.com/bounties/3f1e24c0-87d2-4f6c-a705-820f380879acX Refsource MISCWEBAdvisoryThird Party Advisory
- github.com/vllm-project/vllmPACKAGE