PyPI/vllm CVE-2026-73558: medium 5.3, EPSS 0.41%

vLLM: Cross-User Data Leak Vulnerability

Action: Upgrade vllm to 0.27.0 or later.

pip install vllm==0.27.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-3935
• https://github.com/vllm-project/vllm/security/advisories/GHSA-7m6h-x95x-82q5
• https://nvd.nist.gov/vuln/detail/CVE-2026-73558
• https://github.com/vllm-project/vllm/issues/42860
• https://github.com/vllm-project/vllm/pull/49660
• https://github.com/vllm-project/vllm/commit/451227cb3ff07989698fed982c2d3e4300257924
• https://github.com/vllm-project/vllm
• https://github.com/vllm-project/vllm/releases/tag/v0.27.0
• https://pypi.org/project/vllm
• https://github.com/advisories/GHSA-7m6h-x95x-82q5

CVE-2026-73558 · published 2026-09-10T09:45:00.769969Z · modified 2026-09-10T12:15:15.569176600Z · JSON