All vulnerabilities

Servers and applications

CVE-2025-25183

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Maliciously constructed statements can lead to hash collisions, resulting in cache reuse, which can interfere with subsequent responses and cause unintended behavior. Prefix caching makes use of Python's built-in hash() function. As of Python 3.12, the behavior of hash(None) has changed to be a predictable…

Severity
Low 2.6
Published
7 Feb 2025
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
0.7.2
Sources
NVD

Affected software

SoftwareAffected versions
vLLMServers and applications · cpe:a:vllm:vllm
  • Every version before 0.7.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-25183
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-25183