GHSA-78FP-CF4H-G36P: vllm PyPI
Vulnerability summary
GHSA-78FP-CF4H-G36P is a high (CVSS 8.7) vulnerability in vllm PyPI.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 20-06-2026PublishedVulnerability first disclosed.
- 11-09-2026Last modifiedVulnerability information updated.
Description
Duplicate Advisory: vLLM introduced enhanced protection for CVE-2025-62164 ### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mcmc-2m55-j8jj. This link is maintained to preserve external references. ### Original Description vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor invariant checks by default, an attacker can submit crafted embedding requests with malformed (negative or out-of-bounds) tensor indices, when the prompt-embeds feature is enabled, to trigger crashes or resource exhaustion (denial of service), with potential for out-of-bounds/write-what-where memory corruption. This continues CVE-2025-62164, whose prior fix only disabled the feature by default rather than addressing the root cause.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
PyPI1 product
- vllm≥ 0.10.2, < 0.13.0
1 vendor · 1 product
References
7 links
- github.com/vllm-project/vllmPACKAGE