vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-controlled image bytes to Pillow through Image.open(BytesIO(data)) without restricting decoder selection, and the MIME label does not constrain the selected format. Image-capable request paths through parse_image() and fetch_image() can therefore dispatch an EPS payload to host components. A host with Ghostscript affected by CVE-2024-29510 can execute commands with the vLLM process's privileges, while environments using Pillow 12.0.0 through 12.2.0 can trigger CVE-2026-59203 and exhaust media-loading workers. Deployments without the applicable vulnerable dependency are not affected by that corresponding impact. This issue is fixed in version 0.32.0.
Fix
Patch, vendor advisory and mitigation references on NVD 3
- https://github.com/vllm-project/vllm/commit/710ac56e691d4713feca50a43e6c440f07d373fd Patch
- https://github.com/vllm-project/vllm/pull/60022 Patch
- https://github.com/vllm-project/vllm/security/advisories/GHSA-h3rc-j82p-2c3h Patch, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 9
- Cpes+1 CPE criteria (now 1)NVD modified 2026-10-28 15:37
- StatusPublished → AnalyzedNVD modified 2026-10-28 15:37
- CVSS8.1 (v3.1, CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) → 9.8 (v3.1, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)NVD modified 2026-10-28 15:37
- StatusAwaiting Analysis → PublishedNVD modified 2026-10-26 19:35
- StatusPublished → Awaiting AnalysisNVD modified 2026-10-26 20:17
- StatusAwaiting Analysis → PublishedNVD modified 2026-10-26 17:16
- StatusPublished → Awaiting AnalysisNVD modified 2026-10-26 18:34
- StatusReceived → PublishedNVD modified 2026-10-26 17:16
- First seenCVSS 8.1NVD modified 2026-10-26 18:17
Affected (CPE criteria) 1
cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*
References 4
- https://github.com/vllm-project/vllm/commit/710ac56e691d4713feca50a43e6c440f07d373fd Patch
- https://github.com/vllm-project/vllm/pull/60022 Patch
- https://github.com/vllm-project/vllm/releases/tag/v0.32.0 Release Notes
- https://github.com/vllm-project/vllm/security/advisories/GHSA-h3rc-j82p-2c3h Patch, Vendor Advisory