CVE-2025-46722

Summary

vLLM is an inference and serving engine for large language models (LLMs). In versions starting from 0.7.0 to before 0.9.0, in the file vllm/multimodal/hasher.py, the MultiModalHasher class has a security and data integrity issue in its image hashing method. Currently, it serializes PIL.Image.Image o

Severity

medium

EPSS

0.3% (p18)

Also known as

GHSA-c65p-x677-fgj6, PYSEC-2025-43

Published

2025-05-29

References

• https://github.com/vllm-project/vllm/security/advisories/GHSA-c65p-x677-fgj6
• https://github.com/vllm-project/vllm/commit/99404f53c72965b41558aceb1bc2380875f5d848
• https://github.com/vllm-project/vllm/pull/17378

Related advisories

• CVE-2026-48746 — critical · PyPI/vllm
• CVE-2026-22778 — critical · PyPI/vllm
• CVE-2025-47277 — critical · PyPI/vllm
• CVE-2025-32444 — critical · PyPI/vllm
• GHSA-ggpf-24jw-3fcw — critical · PyPI/vllm
• CVE-2024-9052 — critical · PyPI/vllm
• CVE-2024-9053 — critical · PyPI/vllm
• CVE-2024-11041 — critical · PyPI/vllm

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity