Vulnerability in vllm-project vllm

[ Description ]Official description

vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, the /v1/chat/completions and /tokenize endpoints allow a chat_template_kwargs request parameter that is used in the code before it is properly validated against the chat template. With the right chat_template_kwargs parameters, it is possible to block processing of the API server for long periods of time, delaying all other requests. This issue has been patched in version 0.11.1.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund19 Oct 2026WID-SEC-2026-4051

  vllm: Multiple vulnerabilities Translated from German

  CVE-2025-62426CVE-2025-61620

[ References ]References

• github.com/vllm-project/vllm/security/advisories/GHSA-69j4-grxj-j64px_refsource_CONFIRM
• github.com/vllm-project/vllm/pull/27205x_refsource_MISC
• github.com/vllm-project/vllm/commit/3ada34f9cb4d1af763fdfa3b481862a93eb6bd2bx_refsource_MISC
• github.com/vllm-project/vllm/blob/2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb/vllm/entrypo…x_refsource_MISC
• github.com/vllm-project/vllm/blob/2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb/vllm/entrypo…x_refsource_MISC