{"action":"Upgrade vllm to 0.27.0 or later.","affected":[{"fixed":"0.27.0","introduced":"0"}],"component":"vllm","cve_ids":["CVE-2026-103241"],"ecosystem":"PyPI","epss":0.00714,"exploited":false,"fixed_versions":["0.27.0"],"id":"tcs_01M5KHAF8EWXFSR5TKYK86S9KF","modified_at":"2026-10-07T10:00:03.381099728Z","published_at":"2026-09-30T17:16:42.570Z","references":["https://osv.dev/vulnerability/PYSEC-2026-4186","https://gist.github.com/Yunzez/8e98d656aa667095b513161eb056d28e","https://github.com/vllm-project/vllm/","https://github.com/vllm-project/vllm/releases/tag/v0.29.1rc0","https://vuldb.com/cve/CVE-2026-103241","https://vuldb.com/submit/956250","https://vuldb.com/vuln/411965","https://vuldb.com/vuln/411965/cti","https://github.com/vllm-project/vllm/commit/3439bad37e68ba9755a46f4f6b44a4aeaf1f60a9","https://github.com/vllm-project/vllm/issues/50927","https://github.com/vllm-project/vllm/pull/54303"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-4186","url":"https://osv.dev/vulnerability/PYSEC-2026-4186"}],"summary":"A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a man"}