CVE-2025-25183

Summary

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Maliciously constructed statements can lead to hash collisions, resulting in cache reuse, which can interfere with subsequent responses and cause unintended behavior. Prefix caching makes use of Python's built-in h

Severity

medium

EPSS

0.2% (p7)

Also known as

GHSA-rm76-4mrf-v9r8, PYSEC-2025-62

Published

2025-02-07

References

• https://github.com/vllm-project/vllm/security/advisories/GHSA-rm76-4mrf-v9r8
• https://github.com/python/cpython/commit/432117cd1f59c76d97da2eaff55a7d758301dbc7
• https://github.com/vllm-project/vllm/pull/12621

Related advisories

• CVE-2026-48746 — critical · PyPI/vllm
• CVE-2026-22778 — critical · PyPI/vllm
• CVE-2025-47277 — critical · PyPI/vllm
• CVE-2025-32444 — critical · PyPI/vllm
• GHSA-ggpf-24jw-3fcw — critical · PyPI/vllm
• CVE-2024-9052 — critical · PyPI/vllm
• CVE-2024-9053 — critical · PyPI/vllm
• CVE-2024-11041 — critical · PyPI/vllm

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity