CVE-2026-47155
vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, vLLM's revision pinning controls do not consistently apply to all artifacts loaded for a model. A deployment that supplies --revision or --code-revision can still load dynamic code, GGUF files, image processors, retrieval side weights, or same-repository subfolder weights/config from an unpinned/default revision. This is a supply-chain integrity issue for pinned vLLM deployments. Operators can believe they are serving a reviewed model revision while vLLM resolves behavior-affecting nested or sibling artifacts outside that reviewed revision. This vulnerability is fixed in 0.22.0.
- Affected products
- Vllm
- Vllm
- < 0.22.0
- Fix
- Available
- CVSS 3.1
- 6.5 MEDIUM
- EPSS
- 0.2% (11th percentile)
- Weakness
- CWE-345
- NVD status
- Analyzed
- Published
- 2026-06-22
No indexed exploits for CVE-2026-47155 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2026-47155 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.