Key Vulnerability Information CVE ID: CVE-2025-62372 Severity: Moderate (6.5/10) Package: vLLM (pip) Affected Versions: >=0.5.5 Patched Versions: >=0.11.1 Summary Users can cause a Denial of Service in the vLLM engine serving multimodal models by passing correct but incorrect shape (e.g., hidden dimension) for multimodal embedding inputs. Impact Denial of Service by crashing the engine Mitigation Use an API key to limit access to trusted users. Set to 0 for non-text modalities to ban multimodal inputs. Resolution Issue fixed in #27204 CVSS V3 Base Metrics Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High Credits Reporter: DarkLight1337 Remediation Reviewer: ywang96, isotr0py Coordinator: russellb