CVE-2026-54232

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashinfer-jit-cache package. The package is installed from a custom index (flashinfer.ai/whl/) using --extra-index-url, but the package name was not registered on PyPI, and UV_INDEX_STRATEGY="unsafe-best-match" is set globally. An attacker who registers flashinfer-jit-cache on PyPI with version 0.6.11.post2 can execute arbitrary code as root during the Docker build and backdoor every resulting container image, enabling exfiltration of all user prompts, API credentials, and model data from production vLLM deployments This vulnerability is fixed in 0.22.1.

• CWE-427

• https://github.com/vllm-project/vllm/security/advisories/GHSA-jrf6-vqxq-pjv2Exploit, Third Party Advisory

Published

Jun 22, 2026

Last Modified

Jun 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-54226A vulnerability in Apache Kvrocks. This issue affects Apach…6.4
• CVE-2026-54228A time-of-check time-of-use (TOCTOU) race condition was foun…7.8
• CVE-2026-54229A race condition was found in the abrt-dbus D-Bus service's …7
• CVE-2026-5423@neo4j/graphql library versions prior to 7.5.6 fail to verif…8.2
• CVE-2026-54230A symlink following vulnerability was found in the ABRT post…7.8
• CVE-2026-54231A content injection vulnerability was found in the ABRT post…5.5
• CVE-2026-54233vLLM is an inference and serving engine for large language m…6.5
• CVE-2026-54234vLLM is a high-throughput and memory-efficient inference and…7.5
• CVE-2026-54235vLLM is an inference and serving engine for large language m…6.5
• CVE-2026-54236vLLM is an inference and serving engine for large language m…5.3
• CVE-2026-54242Statamic is a Laravel and Git powered content management sys…4.9
• CVE-2026-54243Statamic is a Laravel and Git powered content management sys…6.1