Threats tagged 'pysec-2026-4351'

vLLM versions from 0.9.2 up to but not including 0.24.0 contain a server-side request forgery (SSRF) vulnerability. This flaw allows API callers to embed a decoded address in the X-Request-Id header, forcing outbound connections. Exploitation can cause a P2pNcclConnector prefill worker to connect to an attacker-controlled host, potentially leaking NCCL unique_id and KV-cache tensors or blocking the worker. The vulnerability is rated high severity with a CVSS score of 8.2. A fix is available in version 0.24.0.