Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L N U H N L 7.1 .0053 42.5 —
AFFECTED Product Versions Fixed vllm < 0.14.1 – —
TIMELINE Jan 26 Reserved by GitHub_M Jan 27 Published (CNA: GitHub_M) Jul 21 EXPLOIT PUBLISHED — CVE-2026-24779 (vllm-project vllm). Public exploit reference added.
vLLM is an inference and serving engine for large language models (LLMs). Prior to version 0.14.1, a Server-Side Request Forgery (SSRF) vulnerability exists in the `MediaConnector` class within the vLLM project's multimodal feature set. The load_from_url and load_from_url_async methods obtain and process media from URLs provided by users, using different Python parsing libraries when restricting the target host. These two parsing libraries have different interpretations of backslashes, which allows the host name restriction to be bypassed. This allows an attacker to coerce the vLLM server into making arbitrary requests to internal network resources. This vulnerability is particularly critical in containerized environments like `llm-d`, where a compromised vLLM pod could be used to scan the internal network, interact with other pods, and potentially cause denial of service or access sensitive data. For example, an attacker could make the vLLM pod send malicious requests to an internal `llm-d` management endpoint, leading to system instability by falsely reporting metrics like the KV cache state. Version 0.14.1 contains a patch for the issue.
| Date | Event | Detail |
|---|---|---|
| January 26, 2026 | Reserved | Reserved by GitHub_M |
| January 27, 2026 | Published | Published (CNA: GitHub_M) |
| July 21, 2026 | EXPLOIT PUBLISHED | EXPLOIT PUBLISHED — CVE-2026-24779 (vllm-project vllm). Public exploit reference added. |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| vllm-project | vllm | — | < 0.14.1 | — |
Authoritative record: CVE-2026-24779 at cve.org
Vendors: vllm-project
Weaknesses: CWE-918
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-24779 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.