ZDI-CAN-30098 HIGH 7.8 Upcoming Mar 25, 2026

vLLM

vLLM is an open-source library for running large language models efficiently. This high-severity vulnerability requires local access with no authentication or user privileges needed, but does require user interaction, and could result in complete compromise of system confidentiality, integrity, and availability. Security teams should monitor for exploitation attempts targeting local LLM deployments and consider implementing access controls on systems running vLLM until patches are available after the July 2026 deadline.

Advisory Details
Researcher Mat Powell of TrendAI Zero Day Initiative & Nitesh Surana (niteshsurana.com) of TrendAI Research
Reported March 25, 2026
Deadline July 23, 2026 98d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy