CVE-2026-34753

🔶 medium

Summary

vLLM is an inference and serving engine for large language models (LLMs). From 0.16.0 to before 0.19.0, a server-side request forgery (SSRF) vulnerability in download_bytes_from_url allows any actor who can control batch input JSON to make the vLLM batch runner issue arbitrary HTTP/HTTPS requests from the server, without any URL validation or domain restrictions. This can be used to target internal services (e.g. cloud metadata endpoints or internal HTTP APIs) reachable from the vLLM host. This

Description

vLLM is an inference and serving engine for large language models (LLMs). From 0.16.0 to before 0.19.0, a server-side request forgery (SSRF) vulnerability in download_bytes_from_url allows any actor who can control batch input JSON to make the vLLM batch runner issue arbitrary HTTP/HTTPS requests from the server, without any URL validation or domain restrictions.
This can be used to target internal services (e.g. cloud metadata endpoints or internal HTTP APIs) reachable from the vLLM host. This vulnerability is fixed in 0.19.0.

CVSS Score

5.4

Medium

EPSS Score

0.0

Exploit Probability

Published Date

2026-04-06

First Seen: 2026-04-07

📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 22.8% of all 326,604 vulnerabilities in our database.

#252,020

Below average severity

Severity Percentile

🎯 CISA SSVC Assessment Updated: Apr 7, 2026

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

Requires human interaction

💥 Technical Impact

Partial

Limited system impact

SSVC data provided by CISA

Last Modified 2026-04-20

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

CWE IDs (Weakness Types)

CWE-918

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-44222	🔶 medium	6.5	0.0	vLLM is an inference and serving engine for large language models (LLMs). From 0.6.1 to before 0.20.0, there is a a Toke...	2026-05-12
CVE-2026-44223	🔶 medium	6.5	0.0	vLLM is an inference and serving engine for large language models (LLMs). From to before 0.20.0, the extract_hidden_sta...	2026-05-12
CVE-2026-7141	🔶 medium	5.6	0.1	A vulnerability was found in vllm up to 0.19.0. The affected element is the function has_mamba_layers of the file vllm/v...	2026-04-27
CVE-2026-34755	🔶 medium	6.5	0.1	vLLM is an inference and serving engine for large language models (LLMs). From 0.7.0 to before 0.19.0, the VideoMediaIO....	2026-04-06
CVE-2026-34756	🔶 medium	6.5	0.0	vLLM is an inference and serving engine for large language models (LLMs). From 0.1.0 to before 0.19.0, a Denial of Servi...	2026-04-06
CVE-2026-34760	🔶 medium	5.9	0.1	vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before version 0.18.0, L...	2026-04-02

CVE-2026-34753

Summary

Description

📊 Relative Risk Intelligence

🎯 CISA SSVC Assessment Updated: Apr 7, 2026

📦 Affected Products 1

🔗 References 1

🔗 Related CVEs 6