Threat · curated 10 Sep 2026
GHSA-hwrm-c4cx-rf4j - Medium severity pip/vllm vulnerability
First reported secalerts.co
Coverage timeline
Single-source advisory — first reported, latest, and curated coincide.
Why it matters
vLLM is a widely deployed LLM inference server, and this unauthenticated leak of environment details and precise version fingerprints helps attackers narrow the attack surface and craft targeted exploits against AI serving infrastructure.
GHSA-hwrm-c4cx-rf4j is a medium-severity information-disclosure flaw in the vLLM LLM serving framework where the FastAPI validation_exception_handler converts a Pydantic RequestValidationError to a string via str(exc), leaking internal file paths, OS username, home/virtualenv paths, Python version, and handler names in HTTP error responses. An unauthenticated attacker can trigger this on any JSON POST endpoint (e.g. /v1/chat/completions) with a single malformed request, aiding version fingerprinting and targeted exploit construction. Fixed in vLLM 0.26.0.