← Vulnerability feed

Vulnerability record · CVE-2025-59425 · published 7 October 2025

CVE-2025-59425: Vllm vulnerability

Vllm · Vllm

vLLM is an inference and serving engine for large language models (LLMs). Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided API key gets correct. Data analysis across many attempts could allow an attacker to determine when it finds the next correct character in the key sequence. Deployments relying on vLLM's built-in API key validation are vulnerable to authentication bypass using this technique. Version 0.11.0rc2 fixes the issue.

7.5 CVSS 3.1 High EPSS 0.57% · top 55.2% CWE-385 · CWE-385
7.5CVSS 3.1 base score
0.57%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 1 tagged exploit
17 Jun 2026Last modified by NVD

Description

vLLM is an inference and serving engine for large language models (LLMs). Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided API key gets correct. Data analysis across many attempts could allow an attacker to determine when it finds the next correct character in the key sequence. Deployments relying on vLLM's built-in API key validation are vulnerable to authentication bypass using this technique. Version 0.11.0rc2 fixes the issue.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/vllm-project/vllm/blob/4b946d693e0af15740e9ca9c0e059d5f333b1083/vllm/entrypoints/openai/api_server.py Product
https://github.com/vllm-project/vllm/commit/ee10d7e6ff5875386c7f136ce8b5f525c8fcef48 Patch
https://github.com/vllm-project/vllm/releases/tag/v0.11.0 Release Notes
https://github.com/vllm-project/vllm/security/advisories/GHSA-wr9h-g72x-mwhm ExploitVendor Advisory

Track CVE-2025-59425 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-25960Vllm server-side request forgery (ssrf) vulnerabilityvLLM is an inference and serving engine for large language models (LLMs). The SSRF protection fix for CVE-2026-24779 add in 0.15.1 can be bypassed in…EPSS 0.72%9.8CVE-2026-22778Vllm sensitive information in log file vulnerabilityvLLM is an inference and serving engine for large language models (LLMs). From 0.8.3 to before 0.14.1, when an invalid image is sent to vLLM's multim…EPSS 10%9.8CVE-2026-22807Vllm code injection vulnerabilityvLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.14.0, vLLM loads Hugging …EPSS 0.83%9.8CVE-2025-47277Vllm deserialization of untrusted data vulnerabilityvLLM, an inference and serving engine for large language models (LLMs), has an issue in versions 0.6.5 through 0.8.4 that ONLY impacts environments u…EPSS 0.96%9.8CVE-2025-32444Vllm deserialization of untrusted data vulnerabilityvLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Versions starting from 0.6.5 and prior to 0.8.5, having vLLM in…EPSS 1.8%9.8CVE-2024-11041Vllm deserialization of untrusted data vulnerabilityvllm-project vllm version v0.6.2 contains a vulnerability in the MessageQueue.dequeue() API function. The function uses pickle.loads to parse receive…EPSS 1.6%9.1CVE-2026-48746Vllm http request smuggling vulnerabilityvLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette'…EPSS 1.2%9.0CVE-2025-29783Vllm deserialization of untrusted data vulnerabilityvLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. When vLLM is configured to use Mooncake, unsafe deserialization…EPSS 0.73%

Source: NIST National Vulnerability Database (record CVE-2025-59425), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.