CVE-2026-7141: A vulnerability was found in vllm up to 0.19.0. The affected element is the function has_mamba_layers of the file vllm/v
Summary
A vulnerability was found in vllm (a language model serving framework) up to version 0.19.0 in the has_mamba_layers function, which can result in uninitialized resource (memory that hasn't been set to a known value before use). An attacker can trigger this flaw remotely, though the attack is difficult to execute and requires high complexity.
Solution / Mitigation
Deploy patch 1ad67864c0c20f167929e64c875f5c28e1aad9fd to fix this issue.
Vulnerability Details
5.6(medium)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
network
high
none
none
April 27, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-7141
First tracked: April 27, 2026 at 02:07 PM
Classified by LLM (prompt v3) · confidence: 85%