Server-side Request Forgery (SSRF) Affecting vllm package, versions [0.16.0,]
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsSnyk Learn
Learn about Server-side Request Forgery (SSRF) vulnerabilities in an interactive lesson.
Start learning- Snyk IDSNYK-PYTHON-VLLM-15907607
- published5 Apr 2026
- disclosed3 Apr 2026
- creditFushuling, Xinhao Yuan, l2yyd5, arthur-stat, Boyi Zhao, Victor-code-Y
Introduced: 3 Apr 2026
NewCVE-2026-34753 (opens in a new tab)How to fix?
A fix was pushed into the master branch but not yet published.
Overview
vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs
Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) via the download_bytes_from_url function. An attacker can cause the server to make arbitrary HTTP or HTTPS requests to internal or external resources by supplying a crafted file_url value in batch input JSON, potentially accessing sensitive internal services or causing denial of service.