RHSA-2026:57387
Vulnerability from csaf_redhat - Published: 2026-08-20 07:57 - Updated: 2026-08-20 16:13Summary
Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (spyre)
Severity
Important
Notes
Topic: Red Hat AI Inference 3.4.4 (spyre) is now available.
Details: Red Hat AI Inference
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in vLLM. This server-side request forgery (SSRF) vulnerability allows an attacker who can control batch input JSON to force the vLLM batch runner to make arbitrary HTTP/HTTPS requests from the server. This can be exploited to access internal services, such as cloud metadata endpoints or internal HTTP APIs, potentially leading to information disclosure or further compromise of the host system.
5.4 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in vLLM, an inference and serving engine for large language models. A remote attacker can exploit a vulnerability in the VideoMediaIO.load_base64() method by sending a single API request containing a large number of comma-separated base64-encoded JPEG frames. This bypasses the intended frame count limit, causing the server to decode all frames into memory. This can lead to an Out-of-Memory (OOM) crash, resulting in a Denial of Service (DoS) for the affected system.
6.5 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). An unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request with an excessively large 'n' parameter to the vLLM OpenAI-compatible API server. This can lead to a Denial of Service (DoS) by consuming excessive memory and blocking the system's event loop, causing the server to crash.
6.5 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library's failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). An unauthenticated attacker can exploit an assert-based security check during activation function loading. By publishing a malicious HuggingFace model, an attacker can achieve arbitrary code execution on the server when vLLM runs in Python optimized mode.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. If a font advances for each glyph by an exceeding large amount, an integer overflow can occur when Pillow tracks the current position. This could lead to a denial of service (DoS) condition, making the application unavailable.
6.2 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Pillow, a Python imaging library. A malicious actor could exploit this vulnerability by providing specially crafted nested lists as coordinates to image processing APIs within Pillow. This could lead to a heap buffer overflow, potentially causing a denial of service in applications using the library.
5.1 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Pillow, a Python imaging library. A remote attacker could supply a specially crafted malicious PDF file, causing the application to hang indefinitely and consume 100% CPU. This vulnerability leads to a Denial of Service (DoS), making the application unresponsive.
4.0 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Pillow, a Python imaging library. An attacker could exploit this vulnerability by tricking a user into processing a specially crafted malicious PSD file. This could lead to memory corruption, potentially causing the application to crash or allowing for arbitrary code execution.
7.8 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). The extract_hidden_states speculative decoding proposer returns a tensor with an incorrect shape after the first decode step. This can be triggered by a remote attacker sending a request that uses sampling penalty parameters, such as repetition_penalty, frequency_penalty, or presence_penalty. Successful exploitation leads to a RuntimeError that crashes the EngineCore process, resulting in a denial of service (DoS).
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
77 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat AI Inference 3.4.4 (spyre) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat AI Inference",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:57387",
"url": "https://access.redhat.com/errata/RHSA-2026:57387"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34753",
"url": "https://access.redhat.com/security/cve/CVE-2026-34753"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34755",
"url": "https://access.redhat.com/security/cve/CVE-2026-34755"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34756",
"url": "https://access.redhat.com/security/cve/CVE-2026-34756"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40192",
"url": "https://access.redhat.com/security/cve/CVE-2026-40192"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41523",
"url": "https://access.redhat.com/security/cve/CVE-2026-41523"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42308",
"url": "https://access.redhat.com/security/cve/CVE-2026-42308"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42309",
"url": "https://access.redhat.com/security/cve/CVE-2026-42309"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42310",
"url": "https://access.redhat.com/security/cve/CVE-2026-42310"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42311",
"url": "https://access.redhat.com/security/cve/CVE-2026-42311"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44223",
"url": "https://access.redhat.com/security/cve/CVE-2026-44223"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://www.redhat.com/en/products/ai/inference-server",
"url": "https://www.redhat.com/en/products/ai/inference-server"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57387.json"
}
],
"title": "Red Hat Security Advisory: Red Hat AI Inference 3.4.4 (spyre)",
"tracking": {
"current_release_date": "2026-08-20T16:13:29+00:00",
"generator": {
"date": "2026-08-20T16:13:29+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:57387",
"initial_release_date": "2026-08-20T07:57:23+00:00",
"revision_history": [
{
"date": "2026-08-20T07:57:23+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-20T07:57:46+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-20T16:13:29+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat AI Inference Server 3.4",
"product": {
"name": "Red Hat AI Inference Server 3.4",
"product_id": "Red Hat AI Inference Server 3.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ai_inference_server:3.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat AI Inference Server"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le",
"product": {
"name": "registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le",
"product_id": "registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/vllm-spyre-rhel9@sha256%3Ab35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09?arch=ppc64le\u0026repository_url=registry.redhat.io/rhaii/vllm-spyre-rhel9\u0026tag=1787151840"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"product": {
"name": "registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"product_id": "registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"product_identification_helper": {
"purl": "pkg:oci/vllm-spyre-rhel9@sha256%3A3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41?arch=s390x\u0026repository_url=registry.redhat.io/rhaii/vllm-spyre-rhel9\u0026tag=1787151840"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"product": {
"name": "registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"product_id": "registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vllm-spyre-rhel9@sha256%3A54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0?arch=amd64\u0026repository_url=registry.redhat.io/rhaii/vllm-spyre-rhel9\u0026tag=1787151840"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x as a component of Red Hat AI Inference Server 3.4",
"product_id": "Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x"
},
"product_reference": "registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"relates_to_product_reference": "Red Hat AI Inference Server 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64 as a component of Red Hat AI Inference Server 3.4",
"product_id": "Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64"
},
"product_reference": "registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"relates_to_product_reference": "Red Hat AI Inference Server 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le as a component of Red Hat AI Inference Server 3.4",
"product_id": "Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
},
"product_reference": "registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le",
"relates_to_product_reference": "Red Hat AI Inference Server 3.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-34753",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-04-06T16:01:43.723837+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455394"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM. This server-side request forgery (SSRF) vulnerability allows an attacker who can control batch input JSON to force the vLLM batch runner to make arbitrary HTTP/HTTPS requests from the server. This can be exploited to access internal services, such as cloud metadata endpoints or internal HTTP APIs, potentially leading to information disclosure or further compromise of the host system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Server-Side Request Forgery allows access to internal services via controlled batch input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34753"
},
{
"category": "external",
"summary": "RHBZ#2455394",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455394"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34753",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34753"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34753",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34753"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-pf3h-qjgv-vcpr",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-pf3h-qjgv-vcpr"
}
],
"release_date": "2026-04-06T15:36:52.942000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T07:57:23+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:57387",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57387"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vllm: vLLM: Server-Side Request Forgery allows access to internal services via controlled batch input"
},
{
"cve": "CVE-2026-34755",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-06T16:02:21.718949+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455403"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, an inference and serving engine for large language models. A remote attacker can exploit a vulnerability in the VideoMediaIO.load_base64() method by sending a single API request containing a large number of comma-separated base64-encoded JPEG frames. This bypasses the intended frame count limit, causing the server to decode all frames into memory. This can lead to an Out-of-Memory (OOM) crash, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vLLM: vLLM: Denial of Service due to excessive video frame processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34755"
},
{
"category": "external",
"summary": "RHBZ#2455403",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455403"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34755",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34755"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34755",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34755"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-pq5c-rjhq-qp7p",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-pq5c-rjhq-qp7p"
}
],
"release_date": "2026-04-06T15:38:53.201000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T07:57:23+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:57387",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57387"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vLLM: vLLM: Denial of Service due to excessive video frame processing"
},
{
"cve": "CVE-2026-34756",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-04-06T16:03:45.222577+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455425"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). An unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request with an excessively large \u0027n\u0027 parameter to the vLLM OpenAI-compatible API server. This can lead to a Denial of Service (DoS) by consuming excessive memory and blocking the system\u0027s event loop, causing the server to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Denial of Service via excessively large \u0027n\u0027 parameter in OpenAI-compatible API",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34756"
},
{
"category": "external",
"summary": "RHBZ#2455425",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455425"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34756",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34756"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34756",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34756"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/b111f8a61f100fdca08706f41f29ef3548de7380",
"url": "https://github.com/vllm-project/vllm/commit/b111f8a61f100fdca08706f41f29ef3548de7380"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/37952",
"url": "https://github.com/vllm-project/vllm/pull/37952"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-3mwp-wvh9-7528",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-3mwp-wvh9-7528"
}
],
"release_date": "2026-04-06T15:40:03.448000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T07:57:23+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:57387",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57387"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vllm: vLLM: Denial of Service via excessively large \u0027n\u0027 parameter in OpenAI-compatible API"
},
{
"cve": "CVE-2026-40192",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-04-16T00:00:49.590876+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458856"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library\u0027s failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40192"
},
{
"category": "external",
"summary": "RHBZ#2458856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40192",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40192"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40192",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40192"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628",
"url": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9521",
"url": "https://github.com/python-pillow/Pillow/pull/9521"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j"
},
{
"category": "external",
"summary": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb",
"url": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb"
}
],
"release_date": "2026-04-15T22:53:56.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T07:57:23+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:57387",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57387"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing"
},
{
"cve": "CVE-2026-41523",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-06-22T23:01:00.799590+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491582"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). An unauthenticated attacker can exploit an assert-based security check during activation function loading. By publishing a malicious HuggingFace model, an attacker can achieve arbitrary code execution on the server when vLLM runs in Python optimized mode.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Arbitrary code execution via malicious HuggingFace model",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as having Important impact for Red Hat AI Inference Server and Red Hat OpenShift AI vLLM serving images, and Moderate impact for Red Hat Enterprise Linux AI bootc images that bundle vLLM. Exploitation requires loading an untrusted HuggingFace cross-encoder model while the vLLM process runs with Python optimized mode (python -O or PYTHONOPTIMIZE=1). Red Hat AI Inference Server 3.2/3.3 images and other components without the vulnerable pooler activation loader (vLLM \u003c 0.14.0) are not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41523"
},
{
"category": "external",
"summary": "RHBZ#2491582",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491582"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41523",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41523"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41523",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41523"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/commit/b3c7ffcab82c2439726f8cb213800f6f38c023d3",
"url": "https://github.com/vllm-project/vllm/commit/b3c7ffcab82c2439726f8cb213800f6f38c023d3"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-q8gq-377p-jq3r",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-q8gq-377p-jq3r"
},
{
"category": "external",
"summary": "https://huntr.com/bounties/dcb05b04-e625-41e7-adbc-bbae0cc2d64c",
"url": "https://huntr.com/bounties/dcb05b04-e625-41e7-adbc-bbae0cc2d64c"
}
],
"release_date": "2026-06-22T22:18:14.494000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T07:57:23+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:57387",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57387"
},
{
"category": "workaround",
"details": "Avoid running vLLM with python -O or PYTHONOPTIMIZE=1 until updated packages are available. Only load models from trusted sources. Restrict who can deploy or update models on inference endpoints. Apply network access controls and authentication in front of vLLM APIs.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vllm: vLLM: Arbitrary code execution via malicious HuggingFace model"
},
{
"cve": "CVE-2026-42308",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-09T06:01:07.510498+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2468457"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. If a font advances for each glyph by an exceeding large amount, an integer overflow can occur when Pillow tracks the current position. This could lead to a denial of service (DoS) condition, making the application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: python: Pillow: Denial of Service via integer overflow in font processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42308"
},
{
"category": "external",
"summary": "RHBZ#2468457",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468457"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42308"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42308",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42308"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0",
"url": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-wjx4-4jcj-g98j",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-wjx4-4jcj-g98j"
}
],
"release_date": "2026-05-09T04:09:01.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T07:57:23+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:57387",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57387"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that applications utilizing the Pillow library do not process untrusted or maliciously crafted font files. Additionally, consider running applications that process image data in a sandboxed environment to limit potential impact. Reloading or restarting affected services may be required for changes to take effect.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Pillow: python: Pillow: Denial of Service via integer overflow in font processing"
},
{
"cve": "CVE-2026-42309",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-05-09T06:01:11.401932+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2468458"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. A malicious actor could exploit this vulnerability by providing specially crafted nested lists as coordinates to image processing APIs within Pillow. This could lead to a heap buffer overflow, potentially causing a denial of service in applications using the library.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Denial of Service via specially crafted coordinate input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact vulnerability in the Pillow Python imaging library could lead to a denial of service. Applications processing untrusted image data that utilize specific Pillow APIs, such as `ImagePath.Path`, `ImageDraw.ImageDraw.polygon`, or `ImageDraw.ImageDraw.line`, with specially crafted nested list coordinates are susceptible to a heap buffer overflow.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42309"
},
{
"category": "external",
"summary": "RHBZ#2468458",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468458"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42309",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42309"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42309",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42309"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0",
"url": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5xmw-vc9v-4wf2",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5xmw-vc9v-4wf2"
}
],
"release_date": "2026-05-09T04:08:10.517000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T07:57:23+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:57387",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57387"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Pillow: Pillow: Denial of Service via specially crafted coordinate input"
},
{
"cve": "CVE-2026-42310",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-05-09T06:01:21.465052+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2468461"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could supply a specially crafted malicious PDF file, causing the application to hang indefinitely and consume 100% CPU. This vulnerability leads to a Denial of Service (DoS), making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Denial of Service via malicious PDF processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42310"
},
{
"category": "external",
"summary": "RHBZ#2468461",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468461"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42310",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42310"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42310",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42310"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/3bf614e4b8615d0ce1d5039efaf6db447fe7c468",
"url": "https://github.com/python-pillow/Pillow/commit/3bf614e4b8615d0ce1d5039efaf6db447fe7c468"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9519",
"url": "https://github.com/python-pillow/Pillow/pull/9519"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0",
"url": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-r73j-pqj5-w3x7",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-r73j-pqj5-w3x7"
}
],
"release_date": "2026-05-09T04:10:48.395000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T07:57:23+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:57387",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57387"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Pillow: Pillow: Denial of Service via malicious PDF processing"
},
{
"cve": "CVE-2026-42311",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-05-09T06:01:14.891885+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2468459"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. An attacker could exploit this vulnerability by tricking a user into processing a specially crafted malicious PSD file. This could lead to memory corruption, potentially causing the application to crash or allowing for arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: python-pillow: Pillow: Arbitrary code execution via malicious PSD file processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important severity flaw in Pillow, a Python imaging library, that could lead to arbitrary code execution. The vulnerability requires a user to process a specially crafted malicious PSD file, which could result in memory corruption and allow an attacker to execute arbitrary code. Red Hat products that process untrusted image files using Pillow are at risk if they do not adequately sanitize input or operate in a sandboxed environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42311"
},
{
"category": "external",
"summary": "RHBZ#2468459",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468459"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42311",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42311"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42311",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42311"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/58f9a1d166dcb0c274807d4423522d205b0c35ea",
"url": "https://github.com/python-pillow/Pillow/commit/58f9a1d166dcb0c274807d4423522d205b0c35ea"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9520",
"url": "https://github.com/python-pillow/Pillow/pull/9520"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0",
"url": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-pwv6-vv43-88gr",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-pwv6-vv43-88gr"
}
],
"release_date": "2026-05-09T04:11:58.092000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T07:57:23+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:57387",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57387"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, users should avoid processing untrusted or suspicious PSD image files with applications that utilize the Pillow library. Implementing strict input validation and sanitization for image uploads and processing workflows can reduce the risk. Additionally, running applications that process untrusted content within a sandboxed environment can limit the potential impact of successful exploitation.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Pillow: python-pillow: Pillow: Arbitrary code execution via malicious PSD file processing"
},
{
"cve": "CVE-2026-44223",
"cwe": {
"id": "CWE-130",
"name": "Improper Handling of Length Parameter Inconsistency"
},
"discovery_date": "2026-05-12T21:02:06.713372+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476827"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). The extract_hidden_states speculative decoding proposer returns a tensor with an incorrect shape after the first decode step. This can be triggered by a remote attacker sending a request that uses sampling penalty parameters, such as repetition_penalty, frequency_penalty, or presence_penalty. Successful exploitation leads to a RuntimeError that crashes the EngineCore process, resulting in a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: vLLM: Denial of Service via malformed tensor shape in speculative decoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in vLLM, as used in Red Hat AI Inference Server and Red Hat OpenShift AI, allows a remote attacker to crash the EngineCore process. By sending a request with specific sampling penalty parameters, an attacker can trigger an incorrect tensor shape, leading to a service disruption for affected AI inference workloads.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44223"
},
{
"category": "external",
"summary": "RHBZ#2476827",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476827"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44223",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44223"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44223",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44223"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/38610",
"url": "https://github.com/vllm-project/vllm/pull/38610"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-83vm-p52w-f9pw",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-83vm-p52w-f9pw"
}
],
"release_date": "2026-05-12T19:58:40.862000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-20T07:57:23+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:57387",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:57387"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:3657354eb0edeb7e0e9aad2a434d7f264626b3d906f4e3e8502a95a73772ca41_s390x",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:54ad323a1a44f99991ca9d28cf0a364a44c5bbce143891936f6c668612c3ffb0_amd64",
"Red Hat AI Inference Server 3.4:registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b35ecb302c7f4e270f44bf70b7f7f8d053eb74761b1104fea346af9a8e089d09_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vllm: vLLM: Denial of Service via malformed tensor shape in speculative decoding"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…