All vulnerabilities

Servers and applications

CVE-2025-47277

vLLM, an inference and serving engine for large language models (LLMs), has an issue in versions 0.6.5 through 0.8.4 that ONLY impacts environments using the `PyNcclPipe` KV cache transfer integration with the V0 engine. No other configurations are affected. vLLM supports the use of the `PyNcclPipe` class to establish a peer-to-peer communication domain for data transmission between distributed…

Severity
Critical 9.8
Published
20 May 2025
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
0.8.5
Sources
NVD

Affected software

SoftwareAffected versions
vLLMServers and applications · cpe:a:vllm:vllm
  • From 0.6.5 before 0.8.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-47277
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-47277