CVE-2025-62164 | vLLM up to 0.11.0 Completions API Endpoint torch.load input validation

November 21, 2025 Yanac

A vulnerability identified as critical has been detected in vLLM up to 0.11.0. The affected element is the function torch.load of the component Completions API Endpoint. This manipulation causes improper input validation.

This vulnerability is tracked as CVE-2025-62164. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More