Vulnerability · Published May 30, 2025 · Assigned by GitHub_M
CVE-2025-48944vLLM Tool Schema allows DoS via Malformed pattern and type Fields
Medium 6.5
In plain English
A medium-severity improper input validation in vllm from vllm-project. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
vLLM is an inference and serving engine for large language models (LLMs). In version 0.8.0 up to but excluding 0.9.0, the vLLM backend used with the /v1/chat/completions OpenAPI endpoint fails to validate unexpected or malformed input in the "pattern" and "type" fields when the tools functionality is invoked. These inputs are not validated before being compiled or parsed, causing a crash of the inference worker with a single request. The worker will remain down until it is restarted. Version 0.9.0 fixes the issue.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | vllm | 0.9.0 | GHSA-vrq3-r879-7m65 |
| PyPI | vllm | 0.9.0 | PYSEC-2026-2023 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| vllm-project | vllm | >= 0.8.0, < 0.9.0 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
- https://github.com/vllm-project/vllm/security/advisories/GHSA-vrq3-r879-7m65 x_refsource_CONFIRM
- https://github.com/vllm-project/vllm/pull/17623 x_refsource_MISC