CVE-2026-103241
1 advisory.
PyPI/vllm CVE-2026-103241: high 7.5, EPSS 0.71%
A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a man
Action: Upgrade vllm to 0.27.0 or later.
pip install vllm==0.27.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.27.0 | - |
Fixed versions
| 0.27.0 |
Sources
- osv: PYSEC-2026-4186
- https://gist.github.com/Yunzez/8e98d656aa667095b513161eb056d28e
- https://github.com/vllm-project/vllm/
- https://github.com/vllm-project/vllm/releases/tag/v0.29.1rc0
- https://vuldb.com/cve/CVE-2026-103241
- https://vuldb.com/submit/956250
- https://vuldb.com/vuln/411965
- https://vuldb.com/vuln/411965/cti
- https://github.com/vllm-project/vllm/commit/3439bad37e68ba9755a46f4f6b44a4aeaf1f60a9
- https://github.com/vllm-project/vllm/issues/50927
- https://github.com/vllm-project/vllm/pull/54303
CVE-2026-103241 · published · modified · JSON