tocsin

CVE-2026-41523

2 advisories.

PyPI/vllm CVE-2026-41523: high 7.5, EPSS 0.91%

vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution

Action: Upgrade vllm to 0.22.0 or later.

pip install vllm==0.22.0

Affected

introducedfixedlast affected
00.22.0-

Fixed versions

0.22.0

Sources

CVE-2026-41523 · published · modified · JSON

PyPI/vllm CVE-2026-41523: high 7.5, EPSS 0.91%

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, an assert-based security check in vLLM's activation function loading allows any unauthenticated attacker to a

Action: Upgrade vllm to 0.22.0 or later.

pip install vllm==0.22.0

Affected

introducedfixedlast affected
00.22.0-

Fixed versions

0.22.0

Sources

CVE-2026-41523 · published · modified · JSON