CVE-2026-25960
vLLM is an inference and serving engine for large language models (LLMs). The SSRF protection fix for CVE-2026-24779 add in 0.15.1 can be bypassed in the load_from_url_async method due to inconsistent URL parsing behavior between the validation layer and the actual HTTP client. The SSRF fix uses urllib3.util.parse_url() to validate and extract the hostname from user-provided URLs. However, load_from_url_async uses aiohttp for making the actual HTTP requests, and aiohttp internally uses the yarl library for URL parsing. This vulnerability in 0.17.0.
- Affected products
- Vllm
- Vllm
- < 0.17.0
- Fix
- Available
- CVSS 3.1
- 9.8 CRITICAL
- EPSS
- 0.5% (43th percentile)
- Weakness
- CWE-474, CWE-918
- NVD status
- Modified
- Published
- 2026-03-09
No indexed exploits for CVE-2026-25960 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2026-25960 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.