CVE-2026-115918 | vllm-project vLLM up to 0.31.x Chat Template /v1/responses ChatParams.get_apply_chat_template_kwargs chat_template memory allocation

A vulnerability has been found in vllm-project vLLM up to 0.31.x and classified as problematic. Affected by this vulnerability is the function ChatParams.get_apply_chat_template_kwargs of the file /v1/responses of the component Chat Template. The manipulation of the argument chat_template leads to uncontrolled memory allocation.

This vulnerability is traded as CVE-2026-115918. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More