Get real-time updates on Telegram
CVE-2025-62164: vllm from 0.10.2 (inclusive), before 0.11.1 (exclusive), 0.11.1 · update rc0, 0.11.1 · update rc1 (+1 more affected…
CVE-2025-62164. CVSS 3.1 base score 8.8 (HIGH, Vendor/CNA). EPSS 0.00929 (percentile 0.59867), scored 17-Oct-2026.
Affected technology
vllm · from 0.10.2 (inclusive), before 0.11.1 (exclusive)
vllm
vllm · 0.11.1 · update rc0
vllm
vllm · 0.11.1 · update rc1
vllm
vllm · >= 0.10.2, < 0.11.1
vllm-project
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
The source reports that an attacker could run code remotely and disrupt service under the conditions described by the source. Vendor/CNA’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.
- CWE
- CWE-20, CWE-123, CWE-502, CWE-787
- CCR priority
- 35.4 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Vendor/CNA
- EPSS
- 0.00929 · percentile 0.59867 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-19 14:02:10.907757+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-62164.html