Dependency Confusion Vulnerability in vLLM by vLLM Project

CVE-2026-54232

What is CVE-2026-54232?

The vLLM inference and serving engine for large language models has a vulnerability related to dependency confusion arising from the installation of the 'flashinfer-jit-cache' package from a non-PyPI source. This misconfiguration exposes vLLM deployments to significant risks, as an attacker can exploit this by publishing a malicious version of the package on PyPI, enabling them to execute arbitrary code with root privileges during Docker image builds. Consequently, this not only compromises the integrity of the container images generated but also risks the exfiltration of sensitive data including user prompts and API credentials. The vulnerability is addressed in the release of vLLM version 0.22.1.

References