01 Record

CVE-2026-73557

vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts

MediumPUBLISHEDCNA: GitHub_M

Base score6.3 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

02 Description

vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts

Published: 2026-08-13 15:00Z1 DAY AGO
Last updated: 2026-08-13 17:52Z1 DAY AGO
Reserved: 2026-08-12
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: Medium (CVSS 6.3)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Weaknesses: CWE-362
SSVC decision: ExploitationnoneAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: 488116331c4c844402f891c8b1f4af310b2a216b242ab32db292d6d855d90305

VendorProductVersionsPlatforms

vllm-projectvllm>= 0.20.2rc0, < 0.26.0—