ZDI-CAN-30098
HIGH 7.8
Upcoming
Mar 25, 2026
vLLM
vLLM is an open-source library for running large language models efficiently. This high-severity vulnerability requires local access with no authentication or user privileges needed, but does require user interaction, and could result in complete compromise of system confidentiality, integrity, and availability. Security teams should monitor for exploitation attempts targeting local LLM deployments and consider implementing access controls on systems running vLLM until patches are available after the July 2026 deadline.
Advisory Details
Researcher
Mat Powell of TrendAI Zero Day Initiative & Nitesh Surana (niteshsurana.com) of TrendAI Research
Reported
March 25, 2026
Deadline
July 23, 2026
98d
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H