High

vLLM vulnerable to timing attack at bearer auth

Type: advisorySources: OSV

vLLM is an inference and serving engine for large language models (LLMs). Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided API key gets correct. Data analysis across many attempts could allow an attacker to determine when it finds the next correct character in the key sequence. Deployments relying on vLLM's built-in API key validation are vulnerable to authentication bypass using this technique. Version 0.11.0rc2 fixes the issue.

Products: Not specified
Affected versions: Not specified
Fixed versions: Not specified
CVEs: CVE-2025-59425
Confirmed fixed CVEs: Not specified
Updated in this feed: 7 Nov 2026, 02:59 UTC · Revision 1

Source evidence

vLLM vulnerable to timing attack at bearer auth

core-osv · Original source

Published 7 Oct 2025, 14:06 UTC

osv:CVE-2025-59425

Complete source record

{
  "id": "2277a964e2654a54dbcb1178156c1a5768916ec6dd2582268a7fe50963885b0e",
  "url": "https://osv.dev/vulnerability/CVE-2025-59425",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "vLLM vulnerable to timing attack at bearer auth",
    "summary": "vLLM is an inference and serving engine for large language models (LLMs). Before version 0.11.0rc2, the API key support in vLLM performs validation using a method that was vulnerable to a timing attack. API key validation uses a string comparison that takes longer the more characters the provided API key gets correct. Data analysis across many attempts could allow an attacker to determine when it finds the next correct character in the key sequence. Deployments relying on vLLM's built-in API key validation are vulnerable to authentication bypass using this technique. Version 0.11.0rc2 fixes the issue.",
    "evidence": "osv:CVE-2025-59425",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2025-59425",
      "aliases": [
        "CVE-2025-59425",
        "GHSA-wr9h-g72x-mwhm",
        "PYSEC-2026-2026"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/vllm-project/vllm",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "b8b302cde434df8c9289a2b465406b47ebab1c2d"
                },
                {
                  "introduced": "b761df963c2032144468a99bcb39a11e73e16ca4"
                },
                {
                  "fixed": "ee10d7e6ff5875386c7f136ce8b5f525c8fcef48"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "0.11.0"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:vllm:vllm:0.11.0:rc1:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0.11.0-rc1"
                      },
                      {
                        "last_affected": "0.11.0-rc1"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "range": [
                      {
                        "fixed": "ee10d7e6ff5875386c7f136ce8b5f525c8fcef48"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  },
                  {
                    "range": [
                      {
                        "fixed": "b8b302cde434df8c9289a2b465406b47ebab1c2d"
                      }
                    ],
                    "source": "REFERENCES_TAG",
                    "original_tag": "v0.11.0"
                  }
                ]
              }
            }
          ],
          "versions": [
            "0.11.0-rc1",
            "v0.11.1rc0",
            "v0.11.0rc1"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-59425.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:49.061138269Z",
      "provider": "osv",
      "references": [
        "https://github.com/vllm-project/vllm/blob/4b946d693e0af15740e9ca9c0e059d5f333b1083/vllm/entrypoints/openai/api_server.py#L1270-L1274",
        "https://github.com/vllm-project/vllm/releases/tag/v0.11.0",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59425.json",
        "https://github.com/vllm-project/vllm/security/advisories/GHSA-wr9h-g72x-mwhm",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-59425",
        "https://github.com/vllm-project/vllm/commit/ee10d7e6ff5875386c7f136ce8b5f525c8fcef48"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-385"
        ],
        "cna_assigner": "GitHub_M",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59425.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-59425",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 517572,
  "published_at": "2025-10-07T14:06:49.042+00:00"
}