Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · vLLM

CVE-2025-48943: vLLM allows clients to crash the openai server with invalid regex

mediumCVSS 3.1 6.5GHSA-9hcf-v7m4-6m2j

Impact A denial of service bug caused the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to GHSA-6qc9-v4r8-22xg, but for regex instead of a JSON schema. Issue with more details: https://github.com/vllm-project/vllm/issues/17313 Patches https://github.com/vllm-project/vllm/pull/17623

Published May 28, 2025 · Updated Jun 27, 2025

Affected packages

vllm

Ecosystem
PyPI
Affected
>= 0.8.0, < 0.9.0
Fixed in
0.9.0
Check
pip show vllm

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Impact

A denial of service bug caused the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to GHSA-6qc9-v4r8-22xg, but for regex instead of a JSON schema.

Issue with more details: https://github.com/vllm-project/vllm/issues/17313

Patches

  • https://github.com/vllm-project/vllm/pull/17623

Credited to g-eoj, russellb, Jason-CKY.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More vLLM vulnerabilities

All vLLM entries