{"data":{"id":"2c70dcda-31ad-48cb-bd70-00ced51ff836","title":"CVE-2026-115911: vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.32.0, authenticated callers can…","summary":"From vLLM 0.19.0 through 0.32.0, authenticated callers can supply a request chat template when no server-side --chat-template is configured, and a malicious model repository can provide one as well. The template is rendered by tokenizer.apply_chat_template() with no wall-clock timeout, output-size limit, or iteration bound. A nonterminating render can block /v1/responses and other chat-template users, while an output-expanding render can exhaust server memory; Harmony models are not affected.","solution":"This issue is fixed in version 0.32.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-115911","publishedAt":"2026-10-26T17:17:18.753Z","cveId":"CVE-2026-115911","cweIds":["CWE-400","CWE-770","CWE-834"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"vLLM chat template rendering denial of service via unbounded Jinja execution","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-26T18:09:59.496Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-26T18:10:03.449Z","patchAvailable":null,"disclosureDate":"2026-10-26T17:17:18.753Z","capecIds":["CAPEC-125","CAPEC-130"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}