CVE-2025-62372: vllm from 0.5.5 (inclusive), before 0.11.1 (exclusive), 0.11.1 · update rc0, 0.11.1 · update rc1 (+1 more affected…

Affected technology

vllm · from 0.5.5 (inclusive), before 0.11.1 (exclusive)
vllm

vllm · 0.11.1 · update rc0
vllm

vllm · 0.11.1 · update rc1
vllm

vllm · >= 0.5.5, < 0.11.1
vllm-project

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Users can crash the vLLM engine serving multimodal models by passing multimodal embedding inputs with correct ndim but incorrect shape (e.g. hidden dimension is wrong), regardless of whether the model is intended to support such inputs (as defined in the Supported Models page). Vendor/CNA’s CVSS 4.0 assessment (base score 8.3/10) rates confidentiality and integrity impact as none; availability impact as high.