{"data":{"id":"d60747e4-2dae-4873-9366-7b3929e04073","title":"GHSA-ph72-cqr5-qpp7: vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features","summary":"vLLM versions 0.25.1 and earlier have a security flaw in their scale-out multimodal transport system. When splitting a request into a render step and a separate generate step, the system trusts caller-supplied encoded features without validating them against the active model, allowing authenticated attackers to forge fields that cause crashes, poison shared encoder caches, or lose data integrity.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-ph72-cqr5-qpp7","publishedAt":"2026-10-05T23:42:50.000Z","cveId":"CVE-2026-105754","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["model_poisoning","denial_of_service","data_extraction"],"issueType":"vulnerability","affectedPackages":["vllm@< 0.30.0 (fixed: 0.30.0)"],"affectedVendors":[],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":true,"disclosureDate":"2026-10-05T23:42:50.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}