CVE-2025-6242
CVE-2025-6242 · Vllm: server side request forgery (ssrf) in mediaconnector
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The load_from_url and load_from_url_async methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an attacker to coerce the vLLM server into making arbitrary requests to internal network resources.
CVSS 7.1 · High · EPSS 0.3% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
red hat ai inference server
No fix published
red hat enterprise linux ai (rhel ai)
No fix published
vllm PyPI
- Versions
- 0.10.0
- 0.10.1
- 0.10.1.1
- 0.10.2
- 0.5.0
- 0.5.0.post1
- 0.5.1
- 0.5.2
- 0.5.3
- 0.5.3.post1
- 0.5.4
- 0.5.5
- 0.6.0
- 0.6.1
- 0.6.1.post1
- 0.6.1.post2
- 0.6.2
- 0.6.3
- 0.6.3.post1
- 0.6.4
- 0.6.4.post1
- 0.6.5
- 0.6.6
- 0.6.6.post1
- 0.7.0
- 0.7.1
- 0.7.2
- 0.7.3
- 0.8.0
- 0.8.1
- 0.8.2
- 0.8.3
- 0.8.4
- 0.8.5
- 0.8.5.post1
- 0.9.0
- 0.9.0.1
- 0.9.1
- 0.9.2
- Affected ranges
- ECOSYSTEM: ≥ 0.5.0, < 0.11.0
Update to 0.11.0