Tag
Remote Code Execution in vLLM LlavaOnevision2 Processor Loader
1 rule 2 TTPs 1 CVEA vulnerability in vLLM versions prior to 0.28.0 allows remote code execution by bypassing the trust_remote_code parameter during the loading of malicious LlavaOnevision2 processor classes.
Denial of Service Vulnerability in vLLM
1 TTP 1 CVEAn authenticated remote attacker can exploit a vulnerability in vLLM to trigger a Denial of Service condition, likely through resource exhaustion.
vLLM Denial of Service Vulnerability via M-RoPE Prompt Embeds (CVE-2026-55514)
1 TTP 1 CVEA denial of service vulnerability, CVE-2026-55514, exists in vLLM versions from 0.12.0 up to, but not including, 0.24.0, allowing an authorized remote user to send a specially crafted `/v1/completions` request that leverages pure prompt embeds with an M-RoPE-enabled model to trigger an assertion failure, causing the vLLM server application to fatally crash.
vllm Vulnerability Allows Remote Code Execution
2 rules 1 TTPA remote, anonymous attacker can exploit a vulnerability in vllm to achieve arbitrary code execution.
vllm and PyTorch Vulnerability Allows DoS and Potential Remote Code Execution
2 rules 2 TTPsA remote, authenticated attacker can exploit a vulnerability in vllm and PyTorch to cause a denial-of-service condition or potentially achieve remote code execution.
vLLM Remote Code Execution Vulnerability (CVE-2026-27893)
2 rules 1 TTPvLLM versions before 0.18.0 are vulnerable to remote code execution due to hardcoded trust of remote code, even when explicitly disabled by the user, allowing attackers to execute arbitrary code via malicious model repositories.