CVE-2026-34753
Last modified
CVE-2026-34753 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. vLLM is an inference and serving engine for large language models (LLMs). From 0.16.0 to before 0.19.0, a server-side request forgery (SSRF) vulnerability in download_bytes_from_url allows any actor who can control batch input JSON to make the vLLM batch runner issue arbitrary HTTP/HTTPS requests from the server, without any URL validation or domain restrictions. This can be used to target internal services (e.g. EPSS estimates a 0.25% chance of exploitation in the next 30 days.
Description
vLLM is an inference and serving engine for large language models (LLMs). From 0.16.0 to before 0.19.0, a server-side request forgery (SSRF) vulnerability in download_bytes_from_url allows any actor who can control batch input JSON to make the vLLM batch runner issue arbitrary HTTP/HTTPS requests from the server, without any URL validation or domain restrictions. This can be used to target internal services (e.g. cloud metadata endpoints or internal HTTP APIs) reachable from the vLLM host. This vulnerability is fixed in 0.19.0.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Vllm | Vllm | >= 0.16.0, < 0.19.0 |
References
- https://github.com/vllm-project/vllm/security/advisories/GHSA-pf3h-qjgv-vcprPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-34753?
How severe is CVE-2026-34753?
How do I fix CVE-2026-34753?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-34748Payload is a free and open source headless content managemen…8.7
- CVE-2026-34749Payload is a free and open source headless content managemen…5.4
- CVE-2026-3475The Instant Popup Builder plugin for WordPress is vulnerable…5.3
- CVE-2026-34750Payload is a free and open source headless content managemen…6.5
- CVE-2026-34751Payload is a free and open source headless content managemen…9.1
- CVE-2026-34752Haraka is a Node.js mail server. Prior to version 3.1.4, sen…7.5
- CVE-2026-34754Mantis Bug Tracker (MantisBT) is an open source issue tracke…4.3
- CVE-2026-34755vLLM is an inference and serving engine for large language m…6.5
- CVE-2026-34756vLLM is an inference and serving engine for large language m…6.5
- CVE-2026-34757LIBPNG is a reference library for use in applications that r…4.4
- CVE-2026-34758OneUptime is an open-source monitoring and observability pla…9.1
- CVE-2026-34759OneUptime is an open-source monitoring and observability pla…8.1
Are you affected by CVE-2026-34753?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST