MediumVulnerabilityLLM-specific
CVE-2025-48943: vLLM denial of service through invalid regex in structured output
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-48943
- Published
- Record updated
- Affected
- vllm >= 0.8.0, < 0.9.0
- Fixed in
- 0.9.0
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.5%
Summary
CVE-2025-48943 affects vLLM, an inference and serving engine for large language models, in versions 0.8.0 up to but excluding 0.9.0. An invalid regex supplied while using structured output triggers a ReDoS that crashes the vLLM server, a denial of service. The flaw is similar to GHSA-6qc9-v4r8-22xg/CVE-2025-48942, but applies to regex rather than a JSON schema.
Mitigation
Version 0.9.0 fixes the issue.
Topics
Related items
- HighHermes Agent - Pre-Authentication Disk ConsumptionSimilar attack · Tenable Research Advisories
- MediumHermes Agent - Pre-Authentication Memory ExhaustionSimilar attack · Tenable Research Advisories
- MediumGHSA-v36g-jcw9-x7cw: Pydantic AI: Excessive resource use when local web fetching converts nested HTMLSimilar attack · GitHub Advisory Database
- MediumGHSA-v2xh-2vp8-57h8: Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrlSimilar attack · GitHub Advisory Database
- MediumGHSA-fpf4-vwcp-v4hp: Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`Similar attack · GitHub Advisory Database