CVE-2026-54236 | vLLM up to 0.23.1rc0 API Image error.message log file (GHSA-hgg8-fqqc-vfmw)

June 23, 2026 Yanac

A vulnerability was found in vLLM up to 0.23.1rc0. It has been classified as problematic. This affects an unknown part of the component API Image Handler. Performing a manipulation of the argument error.message results in sensitive information in log files.

This vulnerability is known as CVE-2026-54236. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More