CVE-2025-25183

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Maliciously constructed statements can lead to hash collisions, resulting in cache reuse, which can interfere with subsequent responses and cause unintended behavior. Prefix caching makes use of Python's built-in hash() function. As of Python 3.12, the behavior of hash(None) has changed to be a predictable constant value. This makes it more feasible that someone could try exploit hash collisions. The impact of a collision would be using cache that was generated using different content. Given knowledge of prompts in use and predictable hashing behavior, someone could intentionally populate the cache using a prompt known to collide with another prompt in use. This issue has been addressed in version 0.7.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-354

• https://github.com/python/cpython/commit/432117cd1f59c76d97da2eaff55a7d758301dbc7Not Applicable
• https://github.com/vllm-project/vllm/pull/12621Issue Tracking
• https://github.com/vllm-project/vllm/security/advisories/GHSA-rm76-4mrf-v9r8Vendor Advisory

Published

Feb 7, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-25178Software installed and run as a non-privileged user may cond…7.8
• CVE-2025-25179Software installed and run as a non-privileged user may cond…7.8
• CVE-2025-2518IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Se…7.5
• CVE-2025-25180Software installed and run as a non-privileged user may cond…7.8
• CVE-2025-25181A SQL injection vulnerability in timeoutWarning.asp in Advan…7.5
• CVE-2025-25182Stroom is a data processing, storage and analysis platform. …9.4
• CVE-2025-25184Rack provides an interface for developing web applications i…6.5
• CVE-2025-25185GPT Academic provides interactive interfaces for large langu…7.5
• CVE-2025-25186Net::IMAP implements Internet Message Access Protocol (IMAP)…6.5
• CVE-2025-25187Joplin is a free, open source note taking and to-do applicat…5.4
• CVE-2025-25188Hickory DNS is a Rust based DNS client, server, and resolver…5.7
• CVE-2025-25189The ZOO-Project is an open source processing platform. A ref…5.5