{"data":{"id":"940d3644-1c49-4259-abd1-5b22dd1ae994","title":"CVE-2026-24779: vLLM is an inference and serving engine for large language models (LLMs). Prior to version 0.14.1, a Server-Side…","summary":"CVE-2026-24779 affects vLLM versions prior to 0.14.1. The `MediaConnector` class in its multimodal feature set has an SSRF flaw in the `load_from_url` and `load_from_url_async` methods, where two Python parsing libraries interpret backslashes differently, letting an attacker bypass the host name restriction. A successful attacker can make the vLLM server send arbitrary requests to internal network resources, which is especially serious in containerized deployments such as `llm-d`.","solution":"Fixed in 0.14.1 (the source states version 0.14.1 contains a patch for the issue).","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-24779","publishedAt":"2026-01-28T03:15:57.280Z","cveId":"CVE-2026-24779","cweIds":["CWE-918"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["vllm@< 0.14.1 (fixed: 0.14.1)"],"affectedPackageNames":["vllm"],"affectedPackageRefs":["pypi:vllm"],"affectedVendors":[],"affectedVendorsRaw":["vLLM","llm-d"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"vLLM server-side request forgery in MediaConnector via URL host bypass","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00579,"epssCheckedAt":"2026-11-04T12:08:34.339Z","kevDateAdded":null,"advisoryAliases":["GHSA-qh4c-xf7m-gxfc"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:07.377Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2026-01-24T21:05:18.239Z","daysToFix":-4,"fixCheckedAt":"2026-10-29T21:41:58.371Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"vllm","fixedVersion":"0.14.1","matchedVersion":"0.14.1","fixReleasedAt":"2026-01-24T21:05:18.239Z","daysToFix":-4,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:41:58.222Z"}]}}