High

vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs

Type: advisorySources: OSV

vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, users can crash the vLLM engine serving multimodal models by passing multimodal embedding inputs with correct ndim but incorrect shape (e.g. hidden dimension is wrong), regardless of whether the model is intended to support such inputs (as defined in the Supported Models page). This issue has been patched in version 0.11.1.

Products: Not specified
Affected versions: Not specified
Fixed versions: Not specified
CVEs: CVE-2025-62372
Confirmed fixed CVEs: Not specified
Updated in this feed: 3 Nov 2026, 04:44 UTC · Revision 1

Source evidence

vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs

core-osv · Original source

Published 21 Nov 2025, 01:22 UTC

osv:CVE-2025-62372

Complete source record

{
  "id": "23959f20c8fe4e5b72a5a51d6cb76ec540f4b71904a8cfa74835a3d3ba2a3a07",
  "url": "https://osv.dev/vulnerability/CVE-2025-62372",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs",
    "summary": "vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, users can crash the vLLM engine serving multimodal models by passing multimodal embedding inputs with correct ndim but incorrect shape (e.g. hidden dimension is wrong), regardless of whether the model is intended to support such inputs (as defined in the Supported Models page). This issue has been patched in version 0.11.1.",
    "evidence": "osv:CVE-2025-62372",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2025-62372",
      "aliases": [
        "CVE-2025-62372",
        "GHSA-pmqf-x6x8-p7qw",
        "PYSEC-2026-2019"
      ],
      "metrics": [
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/vllm-project/vllm",
              "type": "GIT",
              "events": [
                {
                  "introduced": "09c7792610ada9f88bbf87d32b472dd44bf23cc2"
                },
                {
                  "fixed": "439368496db48d8f992ba8c606a0c0b1eebbfa69"
                },
                {
                  "introduced": "b761df963c2032144468a99bcb39a11e73e16ca4"
                },
                {
                  "fixed": "58fab50d82838d5014f4a14d991fdb9352c9c84b"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0.5.5"
                      },
                      {
                        "fixed": "0.11.1"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:vllm:vllm:0.11.1:rc0:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0.11.1-rc0"
                      },
                      {
                        "last_affected": "0.11.1-rc0"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "cpe": "cpe:2.3:a:vllm:vllm:0.11.1:rc1:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0.11.1-rc1"
                      },
                      {
                        "last_affected": "0.11.1-rc1"
                      }
                    ],
                    "source": "CPE_STRING"
                  },
                  {
                    "range": [
                      {
                        "fixed": "58fab50d82838d5014f4a14d991fdb9352c9c84b"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            }
          ],
          "versions": [
            "0.11.1-rc0",
            "0.11.1-rc1",
            "v0.11.1rc1",
            "v0.11.1rc0",
            "v0.11.0rc1"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-62372.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:25.858291699Z",
      "provider": "osv",
      "references": [
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62372.json",
        "https://github.com/vllm-project/vllm/security/advisories/GHSA-pmqf-x6x8-p7qw",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-62372",
        "https://github.com/vllm-project/vllm/commit/58fab50d82838d5014f4a14d991fdb9352c9c84b",
        "https://github.com/vllm-project/vllm/pull/27204",
        "https://github.com/vllm-project/vllm/pull/6613"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-129"
        ],
        "cna_assigner": "GitHub_M",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62372.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-62372",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 492555,
  "published_at": "2025-11-21T01:22:37.121+00:00"
}