Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
vllm-project vllm — SSRF Protection Bypass in vLLM
AV AC PR UI S C I A CVSS EPSS %ile KEV
N L N N U H H H 9.8 .0054 43.3 —
AFFECTED
Product Versions Fixed
vllm >= 0.15.1, < 0.17.0 – —
TIMELINE
Feb 9 Reserved by GitHub_M
Mar 9 Published (CNA: GitHub_M)
Jul 21 EXPLOIT PUBLISHED — CVE-2026-25960 (vllm-project vllm). Public exploit reference added.
Jul 21 RESCORED — CVE-2026-25960 (vllm-project vllm). CVSS 7.1 → 9.8 (NVD).
Description
vLLM is an inference and serving engine for large language models (LLMs). The SSRF protection fix for CVE-2026-24779 add in 0.15.1 can be bypassed in the load_from_url_async method due to inconsistent URL parsing behavior between the validation layer and the actual HTTP client. The SSRF fix uses urllib3.util.parse_url() to validate and extract the hostname from user-provided URLs. However, load_from_url_async uses aiohttp for making the actual HTTP requests, and aiohttp internally uses the yarl library for URL parsing. This vulnerability in 0.17.0.
Lifecycle
Complete event history — 4 events, chronological
| Date | Event | Detail |
|---|
| February 9, 2026 | Reserved | Reserved by GitHub_M |
| March 9, 2026 | Published | Published (CNA: GitHub_M) |
| July 21, 2026 | EXPLOIT PUBLISHED | EXPLOIT PUBLISHED — CVE-2026-25960 (vllm-project vllm). Public exploit reference added. |
| July 21, 2026 | RESCORED | RESCORED — CVE-2026-25960 (vllm-project vllm). CVSS 7.1 → 9.8 (NVD). |
Affected
Affected products and packages — 1 row
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|
| vllm-project | vllm | — | >= 0.15.1, < 0.17.0 | — |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-25960 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.