Log in Start free

Vulnerability · Published Oct 7, 2025 · Assigned by redhat

CVE-2025-6242Vllm: server side request forgery (ssrf) in mediaconnector

High 7.1

In plain English

A high-severity server-side request forgery in Red Hat AI Inference Server from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.3%top 83.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The load_from_url and load_from_url_async methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an attacker to coerce the vLLM server into making arbitrary requests to internal network resources.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
PyPIvllm0.11.0GHSA-3f6c-7fw2-ppm4
PyPIvllm0.11.0PYSEC-2026-2011

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references
Red Hat Red Hat Enterprise Linux AI (RHEL AI) see references

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H

References